Network Security

Currently I've been working on the configuration of several IOS Zone-based Firewall (over ISR2801 with IOS 12..4(15)T12) and I've read about the features and limits of the Self-zone for the router outbound and inbound traffic. I really prefer use the...

Hi all,I was wondering if someone could help me out with a issue I have.  At present our corporation has all internet traffic routed via our HQ, through a Cisco ASA 5510 arrangement.  I need to prevent client machines (subnet / range) going directly ...

I work at a small to medium sized business, where we have a Firewall (Cisco ASA 5510), an IPS System (Cisco IDM), and A Cisco MARS device. Is it neccessary to have all 3?Thanks

can any one tell me which ram is used in Cisco ASA is it a special RAM or normal DDR. if possible tell me the specification is ASA 5520 RAM

Cisco famously quotes max firewall throughput specs on all ASA models, but how do you tell if your firewall is reaching this maximum throughput? For example, there is a 300Mbps max throughput number on the asa 5510 in the spec sheet. How do I know if...

Can someone direct me to the part numbers for the support of the IPS module? Particularly, the software upgrades and signature upgrades?  Do I need a separate contract for the module itself or is that covered by the ASA contract?  thx atgain.

I've been given a handful of 4240s and ssm-10's to install and configure but know nothing about them. I connected up a 4240 and managed to do basic things like upgrade it with the latest pkg and get it to do signature auto-updates. I also associated ...

Hi,a customer want a user which has view-only rights on his catalyst switches. I created a user whit privilige level 7.If you log into the CLI everything is fine. But by trying to log into the web page the system wants a level 15 user.Is their any po...

Hi,i installed last week CSM 4.0 and AUS 4.0 in a customer CED.I need to backup the ASA config (running or start-up) to AUS every day.Is possibile ?If yes can some on help me?Thanks a lot best regards.

Hey,I'm configuring 802.1x multiple authenticatino with C3560G.Without any timer changes, user's mac address is registered by static on mac address table.The issue is that if authenticated user moves to non-802.1x port, this user can't access network...

I have a WS-SVC-IDSM-2 that I have been tasked to setup. Currently the focus is around our pair of ASA’s that are used for internet access but the scope could increase. I am getting some conflicting information on how to setup the packet capture to t...

I have a DMZ configured that should normally only allow traffic to http, mail, etc. However, I would like to allow admin traffic like ssh from certain IPs as well. For example, my DMZs are behind one IP range from one ISP. My LAN is behind another IP...

1. How can I see what software versoin the sensor is running.2. How can I manually update the sensors image. 3. How can I see through the cli when the signatures were last updated.4. How can I unblock traffic that is being blocked by the Sensor.