Network Security

Hi,we are planning to replace Cisco ASA5520 which is a 2nd tier firewall with TMG 2010. Is it advisable to do so ? We have ironport Mail security Appliance on outside interface of tier 2 firewall.The 1st tier firewall inside interface and 2nd tier fi...

An IPS update has apparently been available since the 7th,IPS-SSM_20-K9-sys-1.1-a-7.0-3-E4.imgRelease  Date: 07/Jun/2010IPS-SSM_20  System Image FileSize: 28841.51  KB  (29533702 bytes)But, I've not been able to find the release notes here, http://ww...

I have a Cisco PIX Firewall 525 Version 6.3(5) running that we are in process of decomissioning it.  I am still getting some hitcounts on the following access-list and and want to anaylze it by sending it to syslog server.access-list PeopleSupport li...

Network Infrastructure Overview:-Preferred NAC Mode - L2 O-O-B Virtual Gateway Mode (DHCP Passthrough)-Roughly 4 Layer 3 Boundary Blocks each terminated by Layer 3 Switch-Layer 2 communication within block, layer 3 between blocks- ~ 1500 Nodes per Bl...

Hello Experts,We need to exclude a couple of servers from the inspection. It seems that the inspection doen'st allow the remote email servesr to send emails to my server. The Admin of the remote peer states that it's because of the esmtp inspection. ...

We have dual ASA5510s and dual ISPs (100MB fiber & DSL backup).  Can I configure INBOUND link failover to the ASAs, probably using either EIGRP or OSPF, without requiring the the ISP to add the corresponding protocols on the interfaces facing us?  I ...

Hello all,As most people know, the football (soccer) World Cup is upon us, and will surely cause havoc for corporate networks evereywhere... and mine is no exception.I know how QoS works very well on the ASA, but I need to do something about streamin...

Hello:I am replacing my PIX with a new ASA.  When my PIX was deployed I used a consultant to get it online quickly.  Later I realized he used a lot of wild cards in the config.  (any to any)  Since the initial deployment I cleaned a lot of them up.  ...

version is IPS7.0, asa5520-aip-ssm.Singatrue and  IME can be sucessfully updated,Global correlation can't updated,the Status of global correlation is Critical.I saw the websitehttp://www.cisco.com/en/US/docs/security/ips/7.0/configuration/guide/ime/i...