Network Security

Hi all,I have a question about why signatures are enabled or disabled by default. I can understand that something like echo reply is disabled, because it could cause too many events, and is informational only. But a significant number of high-risk si...

Hi!Is it possible to find out why and when a host was included in the "denied attackes" list?Paulo Roque

I'm having some trouble with h.323 (video) calls through a PIX 525 using NAT. We can get incoming calls fine, but not outgoing calls for some reason. My question has to do with 'inspect h323' vs 'fixup protocol h323'. What's the difference between th...

Dears,is there any way to deploy Cisco Aironet Access Points in OOB on NAC appliance without using a WLC such as VLANs configuration on Access-points via Radius Server or any other way?Thanks

Dear friends,On the 6500 switches, we have an option to give interface level commands like ""no ip unreachables", "no ip redirects", "no ip accounting access-violation"".Is there a FWSM equivalent command for this?Thanks a lotGautam

i'm using pix firewall and using it as a firewall and as a proxy server, the problem is that i can't block the web access from the clients that installed on their pcs a program named ultrasurf , this program changes the web proxy setting in the inter...

Hey Everyone,I've run into a problem and I can't tell if it's a "you can't really do that" type or the brain-fart type.We are starting to test out the AAA cut-through-proxy feature to see if it can satisfy some access requirements we have. I have the...

We are going to have 10 remote sites connect to us for a L2L VPN to access data at our location. We have no control over the remote sites, and my guess is most will br 192.168.1.x IP range. How can we make this work?? Remember, I have no control over...

Hi: I can't seem to figure out what these two messages (609001 and 609002) from a PIX firewall mean. Can someone help.======================Message: %PIX-6-609001: Built local-host interface_name:IP_addressExplanation: A network state container is re...

so we have a NAC in our lab, set up as L3 OOB....we have a vlan set up for internet only access..a route map is configured on the CORE to send the internet only traffic back to the NAC for restrictions (to mimic the inband solution)......in our unaut...

Hi everyoneWe're noticing under stress testing that our ASA5520 is maxing its CPU out at about 3900 TCP connections per second. This is way lower than what Cisco quotes, and our rule set is quite small (a few dozen rules).Is this normal? We are using...

Folks, I have a question regarding FWSM failover. I was reading the documentation and it said that hellos are sent out over the failover link as well as all the interfaces. If any of the interfaces goes down the firewall is declaired down???what is t...

I have asa 5540,four interfaces inside,outside,intranet,dmz,inside.i have my antivirus and domain controller dns server is in inside zone ip 192.168.x.x and some my web servers is in dmz zone ip 192.168.y.y,now i want to insatll antivirus trend micro...

I have a FWSM that seperates various segments on the network. For some reason at times connectivity to some hosts stops without any indication why.I had done some checking and discovered that there seems to be a corrupt XLATE created at times, which ...