Network Security

Hi there,To give you the background we are looking to migrate from our current internet provider. Because there are a lot of services running through our current connection my idea was to have the old line and the new line running side by side so I m...

Hi,We have 400 x 1811 router on which we need to update the IPS signature definition and custom signature.What is the best way to do it withou running CSM ?According to Cisco documentation, we need to add the auto-update command with an .XML extentio...

ZBFW with GRE Tunnel (GRE over IPSec)I have a GRE tunnel between two ISR's. The tunnel works perfectly... until I apply a Zone based firewall using CCP Ver 2.3. Below is the firewall being applied to Router 1. As soon as it is applied I can no longer...

Hi. We have a Cisco IDS 4215 along with 2x Cisco Pix 515e's. I manage the Pix's but know nothing about the IDS (neither does anyone else here, it was installed by a 3rd party long ago). We have a situation where traffic from an external supplier is o...

Hi All, we recently had an issue with a virus exploting SMTP port 25 and sending out spam. Since then I have created an access-list on the inside of our PIX 515  to deny SMTP. Since we have a multisite WAN with one Internet circuit I had to stick the...

Hi,We have recently been installing guest wireless access using a wlc in the dmz and a guest nac server. We have successfully deployed wireless guest services using a single ssid. The client get an ip address from the wlc in the dmz, then asks its co...

Hi,We need to change the source and destination address of a packet in a single travel.For example :F/w : outside : 10.1.1.1 /24 ( subnet )F/w ; inside : 192.168.1.1 /24  ( subnet )Requirement is :If packet with source IP : 192.100.100.1 and destinat...

I have to implement an ACL which allows all the outbound connection but restrictions on the inbound connection , so eventuall i will allow few hosts to access my internal network. The specified ACL will be applied on the outside interface of the rout...

HiWe have a FWSM in a 6500.  I've recently been reading about zone-based firewalls and from what I've read it is only supported on Cisco Integrated Services Routers (Cisco 800 Series Routers; Cisco 1000,1800, 2800, and 3800 Series Integrated Services...

I want to monitor the througput on the FWSM.I have a 6509 and the FSWM is seated in slot 9. From the switch I perform the following:c06#show etherchannel summaryFlags:  D - down        P - bundled in port-channel        I - stand-alone s - suspended ...

I am trying to do some voice qos on an ASA for a SIP trunk. voice vlan is 172.16.2.0/24 and there is a CME hanging off the ASA. So I am using DSCP to go out the outgoing interface, since my CME is already marking traffic, and coming back from the SIP...