Network Security

hiI'm reviewing the situation next three traffic zones outside, inside, DMZ,service-policy xxxx-policy interface outsideservice-policy xxxx-policy interface insideservice-policy xxxx-policy interface dmz_stgoand I need to lower the level of examinati...

I have an IPS-4215 that I am putting online for the first time. I am upgrading the signature file. My question is this: what else do I need to download to monitor this device once it is running?

Hi, What are the steps to enable SDEE on AIP-SSM in Cisco ASA. Thanks.

Hi, recently i connected in the network a failover system ASA 5540 [Version 7.2(2)] (active/standby). I have added the command login banner and I had already enabled ssh version 2. Unfortunately when i make an ssh session to ASAs the banner does not ...

We have the problem of multiple VPNs connected by UMTS-Routers to our RV042. Often our provider routes different UMTS-connections through ONE public ip-address, so that some Remotegateways on our VPN-Router show the same ip-address. Only one remotega...

Hi,I've recently installed AIP-SSM-20 in the ASA, I need to know the following info.1. Is keeping the latest sig.def file (Sig.420) with default actions, will be sufficient for the protection?2. If I change any one signature behavior, what will happe...

I have a question concerning dual homing connections from the ASA 5510 to two switches (See Attached). What I am trying to do is see if there is a way to load share between the switches on the untrusted side (in RED) from the traffic that is coming f...

Is there a way to write a custom signature that looks for a IP address making rapid connection attempts to an IPSec termination device trying to brute force a pre-shared key? Would this be something the Anomaly Detection engine would detect?

Hey All,Scenario:I have a cisco 851 that is connection to an ASA box. I don't have access to the ASA (outsourced company) but the 851 is local. They initially wanted to run private Ip's on the switching side but we told them thats not the standard fo...

Dear All,I know that the asr-group command permit to a couple of interfaces (belonging to the same group) to re-route a return packet for a connection thatoriginated through its peer unit.But the asr works also for the new connections?If a new connec...

Anyone ever experienced an issue where your Sophos appliance that sits behind the ASA firewall cannot make a TLS connection outbound due to the ESMTP inspect option?I don't want to disable it entirely. Is there a way to create a policy map to disable...

Hi Guys, I have pix firewall 525 with software V 6.3. In that pix firewall, i can able to access the one of the dmz server using both nated ip( let say 10.80.80.2) and the original DMZ IP (let say 172.80.1.2). Recently i tried to upgrade to ASA with ...