Network Security

What is the best way to see if the PIX throughput is being maxed out?..

According to Cisco's bulletin, they do not have any signatures recommended to stop the Gumblar Bot Net. However, a client of ours, uses IBM's Proventia and they currently have a list of signatures they recommend to block.IBM: http://www.iss.net/threa...

I have a DMVPN setup and on the spoke router the tunnel interface is T0 and it's on FE0/0 where the ISP router is connected. The total bandwidth is 1.5Mbps.I have IP phone traffic on the VPN tunnel and I want to prioritize it. However the local inter...

Hi folks,I'm trying to write a custom sig to match on certain values found in an HTTP GET request. The sig uses the service-http engine for TCP on standard WEBPORTS. For the sake of this example, lets say the string I'm looking for it:first=<somedata...

We have a CSS with a configured vip for 4 servers in a cluster.The admins want to telnet via port 80 to the VIP and reach a server.They are coming from 192.168.5.xI have entered thse rulesaccess-list inside_access_in line 39 extended permit tcp 192.1...

Hi, hope someone can help. I've been working on setting up access from some clients on the inside interface to a host on the dmz. I've been unable to get it working so far. The config is below.ASA Version 7.0(8)!enable password Bte2XWw78iXdJmqt encry...

We are setting up a new ASA VPN Concentrator that uses the local ISC DHCP server for IP address assignments.The DHCPDISCOVER packets from the ASA are logged in /var/log/dhcpd.log. The DHCPOFFER packets sent to the ASA are recorded in the log. If I re...

Hi Friends,If i doing RME ver.4.2 for IPS 6.1(2), i am facing the issue is Device not supported error.Kindly advice me.

I'm using Firewall Service module for Catalyst 6509.I had problem to ping and access outside ip from inside ip.For example, my pc ip is 10.1.1.5 and I cannot ping the ouside IP 115.x.x.5.My pc has also web server. I can't access it using the public. ...

Hi,I've not had any luck with this. I have an ASA with a sub-interface to a switch and from the switch I have a VLAN where a router sits to our remote office. It is not a VPN just a lease line via serial.My LAN is on 192.168.3.0/24 and the remote net...

Hi,We have a pair of ASA 5540's in a failover configuration.We have upgraded the primary active unit to v8.2(1) and have left the standby in 7.4(2). Although we get warning messages, failover works so I am leaving the standby unit on 7.4 for a week i...

Hi,I'm designing a security system that involves:2 x inside firewalls (ASA5520)2 x switches connected together (for failover)2 x IPS (4240IPS)2 x switches connected together (for failover)2 x outside firewalls (Juniper SSG)I'm at looking at active/st...

Hi Expert,I have a requirement which asks for tunneling all traffic from vpn client except for 3 public IP addresses. The Client VPN terminates on ASA 5510 version 7.2(4)The configuration I tried are as below:access-list exclude_1 extended permit ip ...