Network Security

HelloI have a PIX 506E with 6.3(5) version and I would like to know if I can block internet access to certain users and allow access to some users on the same LAN. I have a SBS server on the LAN.Thank you

I have a remote access vpn setup on a 2801 router (384Mb DRAM, 64Mb Flash) which works fine using IOS c2801-advsecurityk9-mz.124-25a.bin. I have try to upgrade to a .T IOS so I can setup the Browser Proxy Settings options. But when I upgrade I get ve...

I have IDS hardware platform IDS-4250-SX,but it run application IPS Version 6.0(5)E3. This IME support or not?Thank you.

Hi everyoneWe are busy evaluating an ASA5520 + AIP-SSM-20, and are noticing that if we push 30mbit through the firewall, the CPU goes up to about 70%. I'm talking about a single FTP transfer. The inspection load, however, stays below 10%.We are not u...

I have a interesting issue.I installed a ASA 5510 in our network, transparent mode,inside the network we run apple xserves with AFP file sharing turned on. Our network has 3 others building running on other subnets.All traffic runs well thru the ASA,...

We are using 802.1x NAC framework environment. On the clients PC we have CTA 2.1.107, CSSC, and CSA. Some times we have a problem with NAC validation. In the CSACS log we can see the following message “Posture Validation Failure (general)”. In th...

HiI hav2 2 6509 switches which are working as core switches.In each 6509 i have IDSM-2 module.The Aggregation 6509 switches are doing the routing for the vlans and connected to core 6509 from where traffic exit for wan & internet.In my IDSM2 i am pl...

I just bought an ASA5505 with the base license running the following:asa803-k8asdm-611I'm very new to the ASA's and Security in general so bare with me. I'm able to successfully launch the ASDM client and login, but I'm restricted from accessing the...

Hi,I have Cisco 6509 switch with IDSM-2 & FWSM modules. IDSM-2 is having 6.1(2)E3 version and it's CPU-1 & Analysis engine is showing 100% CPU utilization continuously.Please help me to resolve this issue.Thanks..Akhilesh

Hi guys,I have configured my 1841 router to be a Master NTP server.This router has 5 VLANS and hosts coming from all those VLANs can successfully act as NTP clients to get the proper time from the 1841. However, on one of those VLANs, I have an acces...

Is it possible to identify dynamic dns update packets using a class-map (and thus write a policy to drop them)? I see "match header-flag", "match dns-type", and "match dns-class" in the command reference, but I can't find anywhere that these values ...