Network Security

Resolved! how to monitoring IPS event logs !

Hi ,We have Some Cisco IPS and also juniper IDP sensors in our networks ,with juniper i use NSM for analyzing network logs,attacks,generating different kind of graphs and stuff like that,its so easy to work with and also its informative, but with cis...

Resolved! ASA5505 with software 8.3(1) NAT/PAT

HelloI have the following scenario:ASA5505 connected to a DSL modem, and behind this ASA i have a Linux machine that people need to access via SSH. I have it mapped to my outside interface doing PATstatic (inside,outside) tcp interface ssh linux sshI...

Resolved! Cisco ASA 5510 config with SSM

I've been tasked to replace our old sonicwall tz170 firewall with an ASA 5510 and configure it (which I've never done, only routers and switches) and I have a few questions. I'm inside the ASDM and I'm trying to setup my outside interface... The 55...

IPS with Anomaly Detection

Hello guys!Anomaly-detection algorithm detectand stop zero-day threatsDoes the above means that no attack may Happend when we have used the anomaly detection on the IPS?Thanks

NAC in Inband L2 Virtual mode

Dear Experts,I m planning to implement NAC INBand virtual mode,as if i have HP and cisco switches in my network,I have read the installation guide and cisco press book for NAC,as if now i want confirmation from you'll experts the step by step procedu...

NAC switch reporting ifindex different than physical in CAM

I have set the "snmp ifmib ifindex persist" on an older WS-C3550-24PWR switch that is being used in a L3OOB deployment running IOS 12.2(44)SE6. When I manage this switch in the CAM, I have interfaces out of order in terms of their "Index" vs their "...

Resolved! Dynamic NAT rule on second interface breaks first interface NAT

I have a Cisco ASA 5510 and i'm trying to add a dynamic NAT rule on a sub-interface so that internet traffic will work. When i add the rule it is breaking VoIP inbound calls on a different sub-interface. The VoIP is setup using Asterisk and Sipgate...

1811 and IDS?

Hi,I'm a Cisco newb. Was wondering if an 1811 has a built in IDS? And if so, can someone point me to any documentation? I only have the attached file. Not sure if this is the correct one.Appreciate it!Thanks,O

User specific PCF files

Hi all,I'm looking for a solution for deploying one PCF file per user. The reason I want to do so is because each user will authenticate against the VPN using a unique certificate on a personal SmartCard. I would like to save hassle for the users by ...

Resolved! ASA 5520 DMZ Internet Access

I have a DMZ named DMZ4. The address range is 192.168.31.0/24. The gateway address is 192.168.31.1 I have a host with an IP of 192.168.31.5 that needs access to the internet. I have created a static translation, static (dmz4,outside) xx.xx.xx.136...

ASA: what are the TCP ports to be permitted for microsoft AD/Exchange/IIS?

Dear all,I need to configure a access rule in ASA 5550 to permit microsoft AD/Exchange/IIS services, anyone has the idea what TCP/UDP ports to be opened?Like other firewall they have predifined services object for these MS services, so is there any o...

Resolved! FWSM, ERROR: Unable to add, access-list config limit reached.

Hello.I need to change the number of partitions because I'm not able to add more ACL.I'm using a FWSM with only one context and failover peer.To apply the change I need to reload: does the FWSM restart with the same context configuration?Many thanks ...

Resolved! NAC L3 OOB not working accross WAN

I am setting up a proof of concept lab for a NAC installation.I am using Cisco Catalyst 3550 and 2950 switches (the actual environment is using 3750 and 2960 and 2950 switches) and have the NAC set up in central L3 OOB configuration. In this configur...

ASA Management port

Can the managment port have its own gateway address? My computer is on vlan A and the mgnt port is on network B. ospf has populated the routing table for the asa to use the inside interface for vlan A. But when i try to ping the address on B the asa ...

How do I throttle bandwidth by IP via ASA 5505?

I am in a public library setting and have a simple LAN with wired and wireless clients all within the same IP range. I provide open wireless access for patrons. There are never more than 20 total laptops using the network at a time, but sometimes we ...

Network Security

Forum Posts

Resolved! how to monitoring IPS event logs !

Resolved! ASA5505 with software 8.3(1) NAT/PAT

Resolved! Cisco ASA 5510 config with SSM

IPS with Anomaly Detection

NAC in Inband L2 Virtual mode

NAC switch reporting ifindex different than physical in CAM

Resolved! Dynamic NAT rule on second interface breaks first interface NAT

1811 and IDS?

User specific PCF files

Resolved! ASA 5520 DMZ Internet Access

ASA: what are the TCP ports to be permitted for microsoft AD/Exchange/IIS?

Resolved! FWSM, ERROR: Unable to add, access-list config limit reached.

Resolved! NAC L3 OOB not working accross WAN

ASA Management port

How do I throttle bandwidth by IP via ASA 5505?

On-Demand Webinar: B&M Security Transformation with Cisco XDR

Congratulations to the Event Top Contributors Class of 2024!

Knowledge Hub: Cisco Technology for Securing the Enterprise

Cisco + Splunk: It's a new day for your data.

Announcing Resources That Guide You to Success

Relocating 4110 FTD

SIP traffic not functioning as expected following migration

How to Modify Content-Security-Policy (CSP) for FTD Remote Access VPN

IPsec session (Phase 2) hang. Cisco Secure Firewall (Firepower)

Change Syslog Port Cisco FirePower Management Center

Fire Power 1010 orange Status light blinking

ASA 5525-x with Firepower IPS + some features issue

FMC Enable SSL Decryption Impact and Creating Key and Certificate

Access List Configuration on ASA

Expired Web server certificate preventing upgrade