Network Security

I have Cisco IPS 4240 deployed in the infrastructure.I have GRE over IPSec Tunnels accross many locations.I want to know if IPS can check for GRE Payload in case of packets flowing accross GRE over IPSec Tunnel. ( e.g. can I use signature id  1401/0-...

I have an isp that delivers an ethernet hand off with a /30 public subnet.  They also provide a /28 public block for our use.They recommend;/30   =>  edge router  =>  /28  =>  firewall  =>  LAN   (using 1 to 1 NAT & 1 to many NAT)Can we use the ASA 5...

Dear All Experts,Plz let me know what all devices(Hw & Sw) counts required to setup CCIE security LAB.I was just goin through the Blue print which shows the devices required but not mentioned the number of devices required...Other query is, do we req...

Hello:I have a developer who uses a Mac and is running WinXP from within boot camp.  When he attempt to establish his VPN he cannot.  I dont have the error but when he looked it up it said the deny was due to a setting on the PIX not allowing connect...

packet-tracer shows ping traffic being dropped at NAT phase 7 and Result states "Drop-reason: (acl-drop) Flow is denied by configured rule"firewall has simple configuration:access-list Inside_access_in permit tcp object "source" object-group "destina...

Hello Guys..the thing is that I am trying to configure two cisco routers 2800 with a NAC module, nme-nac-k9, butthere is little information about it.....is there any document or book that could help me with that...I´ve already read and followed this ...

I have been instructed to put firewall in front of servers that connected to LAN switch. I do not manage this switch it manages by another team. All four servers are connected to separate VLAN on the switch with 1Gig speed. Server A: 10.10.5.x. Serve...

I managed to convert our old Pix config to our new ASA 5505 config, but when i take out our PIX firewall, and put in the new ASA, internet does not work. Can you please see what i done wrong? I am not an expert so please if you have a solution, be ve...

We have two ASA5520 firewalls configured as active/failover, both firewalls are identical in hardware and software. Currently this are NO issues with this setup. We want to separate these two firewalls and use each as an active ASA5520 firewall indep...

Hi, I'm trying to set up my ASA5510 so that it will pass webmail traffic. I've permitted http 80 and IMAP4 143 to my exchange server on the ouside interface of the ASA but no joy. Can anyone suggest where I'm going wrong?RegardsEgg

Anyone seen this happen on an ASR?If we inspect HTTP traffic as HTTP, then short (<100K) sessions seem to work just dandy.  But longer HTTP downloads slow to a complete crawl -- 5KBps or less.If we inspect HTTP traffic as TCP, or just pass it, then i...

Running an ASA5505, tried 7.2.4(30) and (33), set up a dhcp relay server, as of this morning clients couldn't obtain new dhcp leases.  Did a "debug dhcprelay event 255" at the console, saw this message which doesn't seem to be documented anywhere:dhc...

Hi,I have PIX 515e, 128MB/16MB, 8.0(4)/6.1(5)51. I just bought ASA 5510 Security Plus (post 8.3)Problem 1 - ASA 5510 Security Plus, 1GB/256MB, 8.2(1)/6.2(1)No problem loading config from PIX 515e- However, I noticed that working in ASDM is slow compa...