Network Security

All,I'm creating service groups, and I realized that I can have TCP, UDP, or TCP-UDP. You can only nest the same groups. (TCP can nest TCP, UDP in UDP, so on). The only way that you can mix tcp and udp port numbers is by creating the tcp-udp service ...

Hi Everyone,I capture this log from cisco pix 515e firewall. This firewall connection always intermittent. Message #98 : process_create: out of memoryMessage #99 : process_create: out of memoryMessage #100 : process_create: out of memoryMessage #101 ...

I am able to connect to the asa using asdm with a username and pw.When I telnet to the asa, I get a pw prompt...which we have no idea what we set it to (it's not the pw that I used to connect via asdm).Is there any way to reset the telnet pw via asdm...

All,I have a situation which requires me to block all outbound access to the internet for three hosts with the exception of a few sites. I've created my regex statements to allow only the sites that need to be accessed, but how can I deny all of thei...

I want to set up SSH to my ASA externally so I can manage it remotely,can some one please tell me the most secure way to do it Many Thanks

The PDM is not showing some of the existing object groups but we can see while accessing through CLI mode. Waiting for the valuable advises.version information: Cisco PIX Firewall Version 6.3(5) Cisco PIX Device Manager Version 3.0(1)

We have two identical ASA 5540s on our Border.If we try to connect to a host protected by one of the ASA's on a port that is not permitted for this host, this results in a brief connection; the connection is then immediately closed- see below:...$ te...

I am planning to use ASA 5505 (with 50 User license) for Out of band management for 30 Devices.My requirement is to use two site2site VPN tunnels and 2/3 Remote access Vpn users accessing the Data Center over ASA 5505s.As per the data sheet it suppor...

Is there a Cisco best practice for downloading IPS signature updates?, any documentation on this?, also how often are updates released?

on the IDSM-2 module are the interfaces (gi0/2 gi0/7, on the actual IDS module or are they referring to ports on the switch that it is installed on?

Hi All, I have the following scenario: The internal LAN (around 40 computers & 6 Servers) connecting to a 4500R which connects to two ASAs 5550 (In Failover) which then connects to a 2960G that connects to an IPS and finally a 2821 that gives Interne...

Hi allactually our customer has an AIP-SSM module which is configured in inline mode.some users are appeared as attackers in the IPS event store .can i deny any unwanted connection for these users without affecting on the legitimate connections of th...

Running 6.0(5)e3 on IPS 4235. We have monthly scans or our network. I need to setup those the IP's so that they are not subject to the rules by the IPS.Thanks.

getting from syslog from CISCO ASA%ASA-6-106015: Deny TCP (no connection) from 141.197.138.74/4778 to 10.252.2.181/5061 flags ACK on interface inside It is some thing that I should be concerned ? Or How to fix it.Thanks