Network Security

HiHow can I see the transactions between two hosts that are trying to talk to each other over certain ports .I am trying to find out ports needed to be opened for successful connection .I have tried "sh log" but I do not see those two hosts..The foll...

I have setup the ASA5510-SEC with the CSC-SSM and it is working great. What I need isto be able to provide, for the client, reports of how much time particular users spend on theInternet, where they go on the Internet etc. Do I need more product to d...

Hi, need to setup syslog server that will receive logs from an ASA firewall. Firewall has multi contexts and wondering how the syslog should be setup in this case? One syslog config for all context (from admin context) or individual syslog setups fro...

Hello folks, I am new to syslog so I want to confirm the following:Currently I have the below configured on MY4507:Question:Imagine I create an ACL "permit tcp any any eq 80 log-input" and apply to one of the inbound interfaces so that I can monitor ...

Hi, imagine I just want to find out which IP addresses are using trying to hit my server network on port 80.If my syslog server is limited in storage, I am wondering whether I could just log the first packet from a given source and target IP address....

W are running an ASA 5540 failover pair with SSM-40 modules.  When using the IME version 7.0.2 to manage the IPS we have not been successful in getting anything to work but "Deny Attacker Inline."  Nothing else works.  We have tried every option unde...

Can someone help me with this?Everything has been working great until last night. No changes were made to any configuration.All of a sudden I'm getting these errors. Let me give you a summary of the network.The remote site has two networks:10.10.30.0...

Dear all,I have dual ASA 5540 in Active/FO mode. The outside Interface is connected to a 2960 switch which then connects to a Packetshaper device and the Gateway Internet Router. The gateway router is connected to a satelite modem through a serial in...

Hi !we are currently deploying ACS 5.1 in our network, I would like to limit DCR crendentials to CiscoWorks software if-sefl not only to the server itself is it possible ?We would like to make sure nobody can use DCR crendential to open an administra...

Hi, i have Cisco works LMS3.0,i have added all routers switches, and after every 24 hours, all changes to my routers switches, i get that via email,but i dont see any change report of cisco pix firewall.dont LMS3.0 support firewall changes ? am i mis...

Helloam looking for good scenario related to NAC server with hight availabily, mentioned the how it works,how the phisical coonection could be to each Core?what is the P-service..Thanks for ur time

Hi friends,          I installed LMS2.5 and installation was success...firstly I added 2 devices by giving SNMP strings and there IP address manually and they ware successfully added....but when I started discover devices by auto discover from campus...

Our network management system (CA Spectrum) relies on a correctly modelled physical topology in order to find the root cause of a network failure. To accomplish this, we usually model our infrastructure devices (routers, switches) with their manageme...

I will explain scenario in 2 steps :1. Current Setup :We have T1 line coming from datacenter to our office connected to serial port of 2621 router. Fastethernet0/0(FE0)  is connected to 2900 Catalyst switch.Firewall Pix 515E (OS version 8.0) is also ...