Network Security

Hi there,I have attach a diagram of dmz setup using a cisco soho router, cisco IPS, cisco asa. I want to know how i can stop an attacker. currently from IPS i can block a host. But even i block the host from IPS, i still get alerts from that attacker...

Hi,I've ACL configured on PIX to allow any traffic to and from 192.168.154.23. I want to capture the traffic coming in and going out to the server 192.168.154.23. how do i do that on PIX?Please advice...Thanks..

I have been asked to recommend a router or firewall for two locations.At the main office there is currently adsl link. There is an avaya ip pbx.Another internet link with static address will be added. (the adsl should be used as backup link)At a diff...

Hi there,To give you the background we are looking to migrate from our current internet provider. Because there are a lot of services running through our current connection my idea was to have the old line and the new line running side by side so I m...

Hi,We have 400 x 1811 router on which we need to update the IPS signature definition and custom signature.What is the best way to do it withou running CSM ?According to Cisco documentation, we need to add the auto-update command with an .XML extentio...

ZBFW with GRE Tunnel (GRE over IPSec)I have a GRE tunnel between two ISR's. The tunnel works perfectly... until I apply a Zone based firewall using CCP Ver 2.3. Below is the firewall being applied to Router 1. As soon as it is applied I can no longer...

Hi. We have a Cisco IDS 4215 along with 2x Cisco Pix 515e's. I manage the Pix's but know nothing about the IDS (neither does anyone else here, it was installed by a 3rd party long ago). We have a situation where traffic from an external supplier is o...

Hi All, we recently had an issue with a virus exploting SMTP port 25 and sending out spam. Since then I have created an access-list on the inside of our PIX 515  to deny SMTP. Since we have a multisite WAN with one Internet circuit I had to stick the...

Hi,We have recently been installing guest wireless access using a wlc in the dmz and a guest nac server. We have successfully deployed wireless guest services using a single ssid. The client get an ip address from the wlc in the dmz, then asks its co...

Hi,We need to change the source and destination address of a packet in a single travel.For example :F/w : outside : 10.1.1.1 /24 ( subnet )F/w ; inside : 192.168.1.1 /24  ( subnet )Requirement is :If packet with source IP : 192.100.100.1 and destinat...

I have to implement an ACL which allows all the outbound connection but restrictions on the inbound connection , so eventuall i will allow few hosts to access my internal network. The specified ACL will be applied on the outside interface of the rout...

HiWe have a FWSM in a 6500.  I've recently been reading about zone-based firewalls and from what I've read it is only supported on Cisco Integrated Services Routers (Cisco 800 Series Routers; Cisco 1000,1800, 2800, and 3800 Series Integrated Services...

I want to monitor the througput on the FWSM.I have a 6509 and the FSWM is seated in slot 9. From the switch I perform the following:c06#show etherchannel summaryFlags:  D - down        P - bundled in port-channel        I - stand-alone s - suspended ...