Network Security

The recent deployment of IPS-engine-E3-req-6.0.5.pkg caused a significant incrase in CPU. Top shows sensorapp as the primary culprit. Anyone know what major changes caused this behavior?

Hi I was reading this documentation http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a0080834058.shtmlfor doing active/active failover using pix 8.0. But I have the impresion that the concept of stanby used on pix firewal...

Hello,I am trying to configure Microsoft CA server to so it can be able to work with a VPN session that I want to establish however I don´t know how to configure it. Can you please point to some good document?Windows Server Enterprise SP1 running Cer...

I am wondering when to apply active/active failover on two ASA. Is this typically deploy for multi-mode (ASA with different customers/context)? Thanks.

Hi all,I have a 4260 with 6.0 Image that is not completing the booting sequence, it stops at "grub". As you are all aware, the 4260 do not have CD drive to boot from.Any idea how to recover it. I downloaded the recovery image with .PKG extension but ...

     Dear all,ping signature is not firing unless i ping the IDS itselfsignature no.2004.the customer wants to test that the IDS detects the ping in the IDSM-2 as a test for it's working or not.i tuned the signature no.2004 but it did not fire unless...

Hello all,I have SSL VPN connectivity up and running on several ASA's, but I don't want my users to be able to login from anywhere or from any pc. I would essentially like to disable the clientless aspect of SSL VPN so that users can only login if th...

Please take a look at the attached image, or see here:  http://imgur.com/oSE9v.pngBasically, I want the DMZ network to be available on a vlan in every rack (with 4948 rack switches) in my small datacenter. I also want the DMZ to be easily accessible ...

Recently I was asked to permit port 1494 on an ASA so that the users inside the company could access a remote site Citrix Server. While reviewing the config, I noticed that there is no permit statement for ports 80 and port 443 for the outside interf...

Hi All,Cisco ASA5520-CSC10-K9 bundle has been came with default 50 Users license, but customer wants 500 users license.But as per cisco documentaion  this license is for total users not for concurrent users.My question is as1) What is this total no. ...

hello dears,Can anybody explain me the member event types,what are those??? If i m not wrong those are the member events for the particular group on left side, because they match a rule that the reason incident has been generated and they are been sh...

Dear Team,We are continuously receiving following event on Cisco PIX firewall "Deny IP spoof from (0.0.0.0) to x.x.x.x on interface intfx" .Request you to reply to the following queries:1. Whether the event specified can be classified as an attack?2....

HelloI need some help about access list. I understand is being read from top to down butI would like to confirm if someone have a reference or knowledge on how to organizeaccess list w/ different protocols. what i meant is from top to down w/c protoc...