Network Security

Hi,on a customer's site, on one of their IPS, I get a lot of sig 1330 alerts, mainly those two:1330-12: TCP segment is out of order. If the signature status is set to disabled, the packet will be passed to all engines that are not stream based.This s...

How to get a report for top 10 signatures triggered & top 10 destination in Cisco IPS 4240. Any Piece of infor is appreciated.

Cisco IPS 4200 series doesn't support fail open mode in case of hardware failure. Since Cisco IPS 4260 this support is introduced with bypass card. While going through the datasheet, it says ** support with third party Does anybody have idea which ...

Can the PIX/ASA pass IBM SNA traffic?, or does it need to be encapsulated in IP?.. and if so how can it be secured if coming from outside network? (Is network segmentation the only way?)

Hello Guys,I have a requirement to do destiation NAT in ASA 5510. For example my request will be from 192.168.1.1 towards 10.1.1.1 and it when it reaches ASA, the destination (10.1.1.1) should get NATTed with 11.1.1.1. Could anybody help me out to s...

Hi All,while connecting IDSM-2 using IDM. I am getting the error "Error connecting to server. failed to connect sensor." I am attaching the screen shot.my java details:version 6 update 13

Hello,What extra would I need to practise creating VPN's in a lab at work rather that on the live equipment?All I have is a Pix 515, 2 switches a 2950 and a 3550, and a couple of 2620 routers which have 2 WIC cards in each, but only 1 FE on each.If ...

Hi allWe currently run 2xASA 5520 in Active/FO configuration. However, they both have an Active/Active license, and we'd like them both to process traffic.We are running in single context mode. The firewalls mainly process requests destined for a web...

Hi, I have a site-to-site VPN from a remote office to a HQ site. At the remote site I have an ISR 877 ADSL router(zone based firewall) and a PIX 523 (7.2) at the HQ site. The problem is I can ping and connect to anything in the HQ site. But I can onl...

I'm planning on migrating my VPN users off the VPN 3000 concentrator. There are many users logged on throughout the day. I would like to make this a graceful migration. I would like to know if there's an option to set the VPN concentrator to no longe...

Is it possible to setup ip sla to monitor specific port number? In my case port 500 or esp.

If I change ASDM to 8443, it starts just fine. Yes, I've read about WebVPN conflicts with 8.0, but I've even tried changing that to 1443. I just upgraded from 7.2(2) to 8.0(4) - worked fine on the first firewall and only this ASDM problem with the se...

Hi,Is it possible to lock down an IP-MAC-Physical Interface binding similar to using port security or IP source guard on the physical ports of the ASA 5505? This is to prevent spoofing, man in the middle attacks and the connection of unauthorised dev...

Trying to establish a tunnel with a Cisco VPN client ver 5.0.05.0290 to a remote network running a PIX515 ver 8.0(2) with asdm and the connections are not working properly. The client software is being started on a host that is behind a PIX515 ver 6...

I have this type of topology:Workstation >> Floor Switch >> Cat6513 >> ASA >> InternetMy Workstation is Vlan 123 and my ASA interface inside is Vlan 20Here is my Vlan configuration:!interface Vlan123 ip address 172.21.123.254 255.255.255.0endC6513-C...