Network Security

Question:We are in the process of migrating our ISP from two Sprint T1s to a 20Mb Fiber based connection. I have a new front end router(2911)  that will be in front of the ASA, and I have an empty interface on the ASA. Can I use both connections conc...

I want to send all traffic to the AIP-SSM in my ASA as well as perform the inspections listed in the global_policy map below.  What is the best way to accomplish this?  Can I just enter "ips inline fail-open" within the "class inspection_default" sec...

Hey i hope some wone can help me ....I have a fix ip range  form 92.67.197.96 to 92.67.197.103 mask 255.255.255.24892.67.197.97 router92.67.197.98 pix92.67.197.100 web-serverI can browes the internet from the insdei and from the dmz.And i can ping th...

Hi!I am having a very ugly problem :-(I have a 10MB Internet connection going through a 7206, then two ASAs in failover and then a Cisco CSS with a cluster of 3 web servers that receive constant HTTP transactions. The web servers hold a single web pa...

Hi there,      I might be trying to do the impossible here, but I am trying to get my ASA 8.2(1) to send certain syslog messages to one host and other messages to another host.     By default we are using facility 23 as our logging facility.  Logging...

Hi,One of my client has recently purchased Cisco IDSM-2 for their core router i.e. 7609, however the client has missed purchasing the SUSA licencing for signature updates. Can the client still configure the IDSM-2 without Signatue updates( in any mod...

Hi      I have 2 ASA5510  and one  AIP SSM-10 installed in one of the ASA`s . i want to have a failover Active/Standby but am getting an error ,"Detected anActive mateMate ASA-SSM-10 card in slot 1 is different from mine NOT PRESENT"i there any way t...

Hi,I am facing some issue with bluecoat for caching. When i do the WCCP configuration on normal switch it works fine. Users can access the internet but when i configure WCCP on ASA the i can't see any traffic redirected. Details are as follows:Physic...

How do I block all IM traffic on my new Cisco 2911 router....FYI, we have purchased Trend Micro content filtering services will these help to block all IM (Instant Messanging) gtalk,msn etc..trafficIf not pl provide command./settings by which we can ...

I must be missing something in the config as this is happening on multiple ASA's. I have the following config in place and not receiving any traps on our management servers. I don't even see the Trap PDU's increasing in the snmp-server statistics. An...

Dear Sir ,I used NAC 4.7.1 and config  AD SSO with Windows 2k Server . ( LDAP auth is OK)The service of  SSO is running on CAS , but TCP/8910 port can't be listen .How should I do open TCP/8910 port and how to fix it ?

Hi!We are now installing a OOB NAC Solution, in the Virtual Gateway mode, and we are having a hard time to get the workstations to correctly run windows GPOs, run the login scripts and finally have total access to the network.I suppose we are having ...

Hi Guys, I'm willing to do the HA configuration between the two Managers and the two Servers? I had three concerns on this1- CAM DNS mapping: if I do this locally on the CAM appliances, would I map the name to eth0 IP address or the eth1 IP address (...