Network Security

Hi all ,I have 2 ASA configured in active/standby failover mode. I want to configure IPS in promiscus mode with fail-open configuration.i have not connected IPS with any pc through magmt port.I can access IPS through ASA(5520) using session 1 and abl...

I am running IME version 7.0.2 on Windows 2003 Server, however it was found that everytime I logout the desktop (Locally, not Remote desktop) the windows IME service "Cisco IPS Manager Express" will terminated automatically. I have try to fresh insta...

We are trying to figure out exactly what route to take with the following scenario.We would like to implement IP SLA to monitor latency. Setting this up is not an issue. When the latency goes above a certain threshold the router fires off an SNMP tra...

Hi Guys ....I have just taken over the management of a Cisco ASA 5505 : ASA version 8.0(3) / ASDM 6.0(3)In the Firewall Dashboard > Top Usage Status > Top 10 Services Tab - the previous manager has labelled some of the ports/protocols with namese.g. ...

Hi There,We are running multiple test websites with host headers enabled on the servers. I want to know if the Cisco ASA 5510 can be configured to pass on the requests to these internal servers based on the domain name rather than the IP address and ...

Hi all,I am trying to upgrade an ASA-SSM-10 running version 5.1 software.I have set up an FTP server using Serv-u and can connect to it successfully.When I attempt to upgrade using the following command, I get the error below.sensor(config)# upgrade ...

Hi everyone,I have 4 interfaces. 1 outside interface and 3 inside interfaces (DMZ20, LAN2, LAN3). I need permit traffic between all inside interfaces at least for the beginning - this works fine now, NAT for internet from all inside interfaces to out...

Hello all,At monitoring, real-time log viewer, loggin level debugging, and syslog also, I can't see the message 106100, which each Acess List Entry should generate when there is a match. Some times are generated, but 99% most of the time aren't.I can...

Hello everyone. My current environment contains an ancient NS100 (Grey box not blue) doing firewall/NAT duties and a Cisco PIX 515e doing VPN duties. I've looked at the following UTM devices to replace my current setup: Cisco ASA5510 Juniper SRX240 ...

Hi Netpros,I am getting this error when I trying to re-image the IDSM-2 in maintenance partition. Actually I dont know the password for the administrator account and re-image was only option according to documentation. This is the step i am following...

Is using the Object-Group will reduce the processing effort ?and is there any documents for ACL design consedieriation ?Thanks a lot in advance.

Hello,Cisco ASA question, if I can carve small range of global IP addresses from big IP range that exists on outside and put this small range to dmz interface?.The task is to have a few servers assigned global IP but have them behind a firewall so we...