Network Security

Hello CCIEs or not,2821 ISR IOS Firewall 12.4(24)T2 is connected to a second ISP through Vlan304 and cable router I added nat inside source route-maps in order to nat in each ISP addressing subnetsProblem is that inside FTP clients successfully conne...

I have a setup where there are 2 x Cisco6509E Switches with FWSM and IDSM.I am trying to Loab Balance traffic to the 2 x IDSM using Etherchannel and can only do this when both IDSMs are in a single chassis, I check some Cisco sites which highlighted ...

HiDoes anyone knows how to setup the IPS4200 Series to automatically backup or even manually?

Hi,I have an ASA 5505 configured with Site-To-Site VPN to an ISR at headquarters (Remote Site to headquarters). The VLAN2 int is configured with a public IP to the Internet router .  This public IP was given to us by the client, where we are leasing ...

Can an IPS be used to match usernames during RDP and or RPC sessions?We have done some wireshark captures and searched the stream content for usernames with no success.The servers are 2003 & 2008.Perhaps MARS is the best solution here for reporting t...

hi.. i am usingcisco asa 5550 having ios asa821-k8.bin and CSD image csd_3.4.1108.pkg.After CSD is enabled SSL VPN client doesn't allow web download to happen and my VPN client doesnt download at client end.

HiI have a question regarding VPN concentrator.We have configured VPN concentrator with 3005.User coonect to VPN concentrator from internet to access internal resources.But there is no restriction for accessing internet when the client conncet via VP...

Hi all,         i have block sites in csc ssm via http blocking ,but those site can open via https so how can we block sites ,pls ur suggestion may help u .RegardsMak pak

Hellosetup is end_user_SW==========Core=========ASA============Internet_SW======(( I N T E R N E T )))I have users on IP range 192.168.2.0/24How to allow inside users access application on internet on port 999 and block all traffic from inside to out...

We had a SSM-40 IPS module fail last week and I am setting up the replacement to go online tonight.  I was hoping to get it up quickly by just cutting and pasting the config from the failed IPS module to the replacement.  From what I found out, it is...

I have an asa 5520 that I'd like to be able to load balance 2 internet providers on.  I've been playing around with a possible config.  interface GigabitEthernet0/0  nameif outside  security-level 0  ip address 71.54.211.2 255.255.255.0  ! interface ...

Hi,would anybody be able to help me to configure asa 5505 to achieve these requirements please?- 3x interface outside, inside, dmz- some traffic needs to go from outside to dmz web server and then be forwarded to inside ip address or group ip address...

Hello,Is there away of creating a policy-map that allows UDP ports to open up dynamically for 10000-49999 ratherthan open them up in an ACL? After a call is made thru the firewall, it uses UDP ports 10000-49999. I don't want to open up all these port...