Network Security

Dear friends,I am getting a lot of 1204/0 and 1208/0 hits for a particular server behind FWSM with destination traffic being 224.0.0.255 and protocol being UDP.These signatures are relating to Missing Initial fragment and IP Fragment Incomplete datag...

Hi,One of our customers webserver is hosted with us and its behind the ASA & IPS with standard IPS configuration. I have also enabled some signatures related to IIS n DDOS. The website is constantly under DDOS attack from various IP addresses, each s...

I'm a new intern at a company working to gain real world experiance for free.I was given the task of reseting PIX 501's back to their factory default settings.  Thats easyif you have thw username and password. I tried to follow the directions on CIsc...

Can someone please tell me the embryonic IKE SA Limit an ASA5510 running 8.21.  Is there a way to alter this through a policy map or other? If so could you send a configuration example?

Hello,We have a CUBE Router 3845 and a Callmanager doing SIP with a ASA 5520 inbetween.On the ASA, I keep seeing large amount of syslogs regarding invalid UDP fields (See attached screenshot) occur in bursts at a very fast rate.Is this due to a probl...

Dears,I have a ADSL router ahead of my firewall OUTSIDE INTERFACE and ADSL is doing natting for the users who are going to the internet ,i want to disable natting for internal users on my firewall, As if now i have a INTRANET connectivity from my DMZ...

Hi, We have Cisco 5505 in our remote side. The original network person quit suddenly. No IT person in that place. Anyway to recover user id/password on CISCO 5505 ASA from remote side (Head office)? Any response will be great. Thanks..Aminul

I am not reading much of info in the way of guidelines to follow during design phases. What would be  a reasonable size/number of subnets for behind each CAS, CAM, ACS etc capabilities by model, theoretical limits etc. If someone can give some hypoth...

I have a published Web site in which are entered facts that should only be viewed but not downloaded.Unfortunately happens to find myself often to deal with agent that recursively download data. As network devices have a firewall WS-SVC-SM-1 and a ID...

Dear sir,I need to verify whether my IPS signature is being updated or not, How can i check using CLI mode on that sensor(ASA-5510-AIP)Any help will be appreciated.And, As I attached a picture, this is the wizard of IPS  Automatic signature Update,I ...

i have an IDS 4215 ,and i want that it give me a warnning when users make authentification windows or actice directory to some servers.should i add a signature or what?and i want to specify the servers which the warnning will be available.

Hi All,1st post here so forgive me if I've overlooked something simple here.I've recently been given the task of updating the ASDM and ASA software on a Cisco 5510 firewall.ASA v7.0(8)ASDM v5.0(8)Quite badly out of date now as you can see, I've gone ...

I have dual firewalls on either end of my DMZ and would like for my DMZ hosts to serve up content to both internal and public users. My issue is that I'm not sure how to simplify the routing.I have my DMZ host with a default gateway of the public fir...