Network Security

Hi,ASA 5510 with no IPS/CSC modules.Can I use the MPF to prevent files with extension .torrent from being downloaded?Can you specify this using HTTP inspection or regex?Thank you,Federico.

Hi All,I am having the issue with my IPS 4260.Whereas the IPS system time is correct, and I have set a UTC offset of 330 min (being in the GMT +5.30 hrs time zone.), I am still seeing the event(log attached) time on the event(monitoring--event-event ...

I have a 4255 IDS/IPS sensor running v7.04, everyday at 2pm it is doing something that causes it to either reboot or stop passing traffic long enough for my firewalls to think that I am no longer passing traffic which forces them to fail-over.  I hav...

PC----------> Router -----------> ASA ------------> ISP          E0/0          E0/1     E0/1     E0/0I am trying to setup a new ASA 5505 to connect through my ISP.  It is a base-license unit.I am DHCP'ing an address from the router.  (192.168.0.X)The...

Hi everyone, first of all, I'm sorry for my english!!! I have a Cisco ASA with 03 interfaces:- outside (172.1.1.0/24)- primary (1.1.1.0/24)- backup (2.2.2.0/24)Also, I have one primary server with its backup server located in other site. Both servers...

Hi all,I am trying to configure several IPS units (SSM-20, SSM-40, IPS 4260) before sending them to their physical locations.The problem is that when I configure the NTP server, the IPS tries to contact the server I've configured. However the IPS is ...

Is there any way to have a client by group-policy update the anyconnect client from the ASA and leave the others alone?Here's the situation. I have a user that wants to stay on 2.3, but I have 2.4 that I want other clients to get. I set up the order ...

Hi,I'm trying to submit and deploy updated config info to my IPS device.  I have two virtual sensors, vs0 and vs1.  I am getting a deployment failure trying to update vs1 with the following info:Failed to generate edit config delta  for analysisEngin...

Hello: This may not be the right forum for this, but over the weekend I tried to replace my PIX515e with a new ASA5520.  I got it online and then right away in testing when sending outbound e-mails I got the below NDR.  I use Exchange.  It goes Back ...

Hello all,following Problem:I'm replacing an IPCOP FW with a Cisco 5505. On the IPCOP there is the Outside Interface with the ISP and an alias Interface (on the Outisde) with a second (different) IP Range from the same provider, routed to the officia...

Folks,I am trying to use the NAC with WSUS requeriment type but I am experiencing some problems with slowperformance to verify users.I am using Severity mode and some machines have for about 2 minutes to pass trough posture assessment andothers machi...

Hi halijenn / NT / MagnusI have a query on "Deny TCP Reverse path check " . Logical interfaces are configured on the Firewall of which physical interface Gig0/0 is not assigned any "nameif". The logical interface Gig0/0.1 is "inside" interface [sec l...