Network Security

I have a server that needs two nic's, a public address on one and a private/inside IP on the other. The server needs to have a public IP since the application is hardcoded to use it. Obviously, it is not secure to have a public ip of a server on th...

Hi,I want to deploy NAC at a Central site to protect the main Servers and resources from remote sites that have multiple users/contractors. The remote site will have their own DC's and the users may log in locally and make use of local file repositor...

Hi to all,in a lab enviroment i have configured a CAM/CAS solution on 3310 server and I have installed 2 pc (one windows Vista and one XP) with nac client 4.6.2.133 version.My problem is auto-remediation and manual-remediation, client get me a tempor...

Hi all,I have an ASA that is currently serving up a Public Network, I would like to limit the bandwidth. Can I does per user or per transport session. Also is there a way for me to block at layer 7.peer to peer and lime wire for example.Thanks

Our company has a Pix 501 and even though I installed it and configured it, I wouldn't say I know what I am doing. Please bear that in mind. :-)I have two questions. One, while using the PDM to change the firewall's inside IP address, it seemed that ...

I just recently upgraded to version 8.2 on our ASA's and can no longer see the syslog id of 106100.When checking under "syslog setup" the entry is there but has the logging level as N/A and will not allow me to change it.Any one else or how do I fix ...

I wonder if anybody tried to run ibm pcomm application over smart tunnel to connect to the mainframe. It is telnet like software. I am trying to make it work but I think I am missing something. By the way I can RDP to Wintel on the same subnet. It wo...

Hi there, I wondered if there's a way to make a VPN cluster with IOS router like ASA does, in order to load-balance incomming connection between routers. I think a solution would be to use external switch with a CSM module, but is there any built-in ...

Hi,We are attempting to move from the old Security Monitor in Cisco Works VMS to the realtime monitor (IPS Event Viewer) within CSM. The problem we are getting is a subscription error from the sensors when trying to open the realtime monitor.Error Ou...

I have the need to NAT an inside address (DMZ acutally) to two different outside addresses- one outside address is just for internet access, the other one is a NATed address on a VPN L2L tunnel. So I want 10.10.10.1 to translate to 192.168.1.1 if goi...

I have a new ASA installed at a client that is running 8.2. Whenever I am in the ASDM looking at the log monitor, the syslog connection keeps dropping every few minutes. I 8.2 running at other clients and do not have an issue. Any help would be gr...

Hello,One of our PIX firewalled recently failed over. Since it happened, it constantly dipslays the sync status message:.............................................Sync CompletedSync Started.............................................Sync Completed...

What are the security advantages to make NAT between DMZ and inside??Thanks a lot

Hi All,I have an AIPSSM IPS module installed on an ASA-5510.I can access the module through the ASA's backplane using the 'session' command.I followed the setup and assigned a management IP.I can access the ASDM using the ASA's IP address, but when I...

Hi,I just wish to ask how to update the signature files of the IPS (SSM) module attached to the ASA. Also, do these signature files include the antivirus signatures? Thanks in advance.