Network Security

Hi Everybody,       What type of traffic should be permitted and denied on an internet facing interface with DMVPN services also running on it. I have a security ACL placed in it which blocks basic security threats and ports but i am just keen to kno...

I need to download a packet capture daily to a server. We will use the "scp" option to retrive the capture but?Can I automaticlly store a capture in flash? Or can I retrieve it from another memory location via scp?wget works but I need a secure metho...

We are using an AIM-IPS module in a 1841 and it has been working fine, however we just upgraded our broadband link and didn’t notice a increase in throughput.We were consistently getting about 16 meg download speeds and this didn’t change with the ne...

I'm having a problem with NAT , i have a Videoconference system and from site A to SIte B is all good. But when site b tries to dial site A, is not completing and in ASA logs on site B i get reverse path translation failed from DMZ to Inside. Dialing...

Hello - I'm a complete novice when it comes to configuring via the command line, but I am trying my best to learn.  We have a Cisco ASA 5505 and would like to configure it using a Cisco provided solution for URL filtering.  At this moment we only hav...

Hi,We want to use the DHCP relay service on a Cisco 5505 ASA connected trough a VPN IP_Sec site-to-site tunnel with a PIX 535. We set up te configuration as discribed in the documantation. From de remote site the ASA 5505 we can ping de DCHP servers ...

Issue: Cisco  firewalls require only one level of password i.e. the domain username  and password are used for both logging in as well as reaching global  configuration mode. Background: We  have multiple Cisco network devices set up which authentica...

Hi,I am using router now.  Did any IOS firwall or IPS command can protect like "login block-for" command to control number of login per period of time.   It is because my servers in network also week to limit number of limit (ssh) per period (say min...

Ever since i have setup 2 ASA 5520's in a failover state. i cannot telnet or ssh to either device. if i reboot them it starts to work again, but not for long. does anyone know why this is occuring?

Hello,I want to buy an ASA5510 + SSM for my lan.The goal is :- Make URL filtering/blocking within work hours- Deny some application like IM, P2P, web radio, during work hours.Trend Micro is good for the first think : url filtering by categoriesBut is...

I am wondring that no document from Cisco IPS data sheets mention the concurrent session support in Cisco IPS 4200 series sensor. I am looking forward to any one who can advise about the subject.ThanksNouman

Hi ,i am unable to download PIX 515e 8.0(3) Flashpixfirewall# copy flash: tftp:Source filename []? pix803.binAddress or name of remote host []? 192.168.110.79Destination filename [pix803.bin]?%Error writing tftp://192.168.110.79/pix803.bin (Cannot al...

Hi all,I am currently facing an interseting issue and it goes like this.....We have one URL hosted on of the server which is access by both our private domain ( intranet domain) and public domain (internet domain).For intranet users we have simply al...