Network Security

Following the steps in:http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a00809f0d75.shtml#svg to configure SBL (ASDM), when I try to assign the XML profile to the group policy (step 11), I hit OK after choosing the XML fi...

We have an ASA 5510 and have it set to enable Threat Detection and "Shun hosts detected by scanning threat". I attached a screenshot of the ASDM. Once a month we send out a video to our member firms and one firm will continually get shunned. It happe...

Hi all,i have a setup with 2 X asa 5505. i configure both asa to a VPN site to site configuration - IPSEC (no split tunnel).my question is if i can enable multicast (pim sparse-mode) on that configuration and platform ?please advise,Avi.

Hello,I have a LAN IDSM in promiscusous mode wherre I'm seing too much of the below alerts, I've researched it and found out that it should be stopped! since it is a high severity alert!! however I guess summarization is preventing me from knowing th...

Planning on moving my standby fwsm to a new 6500 chassis; couldn't find any documentation on the procedure.  The config should be stored on the fwsm (rather than the 6500 itself), so I'm assuming the move should be easy, just a matter of moving the "...

Hello,We're desinging a Network, for which I need some expert advise on.We need to build two tunnels from a Remote ASA, to a Hub ASA, and a VPN Concentrator (for redundancy). Basically, we're thinking of doing an L2L VPN between the two ASAs and a Re...

Hello,Im seeing a Huge amount of events related with the signature ARP Reply-to-Broadcast 7102.The sensor saw an ARP Reply packet with its payload Destination MAC containing a broadcast address. This is not normal traffic and can indicate an ARP pois...

Currently I've been working on the configuration of several IOS Zone-based Firewall (over ISR2801 with IOS 12..4(15)T12) and I've read about the features and limits of the Self-zone for the router outbound and inbound traffic. I really prefer use the...

Hi all,I was wondering if someone could help me out with a issue I have.  At present our corporation has all internet traffic routed via our HQ, through a Cisco ASA 5510 arrangement.  I need to prevent client machines (subnet / range) going directly ...

I work at a small to medium sized business, where we have a Firewall (Cisco ASA 5510), an IPS System (Cisco IDM), and A Cisco MARS device. Is it neccessary to have all 3?Thanks