Network Security

Hi, How to test an IPS.Is there a tool that can help us to test that all rules in the IPS work normaly.Best regards,Antra

Hi all, soes anyone know the message ID for syslog, that is created when someone connects remotley to my asa using vpn client?cheers

I have setup a L2L VPN for a customer in which the vendor requires their IPs to be natted when they come across. So, I have setup policy nat on their pix for the L2L VPN. Here is a snip of the NAT config: access-list nat-to-vendor permit ip 192.168.1...

Can I upgrade a failover pair from 7.0(1) to 7.2(4) directly without having to upgrade to a 7.1 version first? These are being done on a 515-E pair, can this still be done with a zero downtime upgrade?

Dear ALL,I've implemented a test configuration like cisco document ID 82020, but a single Lan-to-Lan and a remote VPN access. Lan-to-Lan behaviour is ok and remote access seems to be running within the first lan, but if I try to ping hosts on withind...

Hi, I have three policies (see below)which make up a crypto map policy on a security device. How does policy 10 match traffic if there is no "match address" statement? This is the peer I wish to edit but don't know how it is matching? Is there a defa...

Can anyone help? I am unable to access the management interface of my ASA unless I am in the same subnet. There does not seem to be any way to give it a gateway address. So I have to manage the ASA inband via the inside interface.The interface config...

Hi all.We have several remote sites, connecting to headcuarters over IPSEC vpn to a Concentrator 3560.The concentrator have a public ip, and the internal interface is on a DMZ firewall.We need to tunneling all remote sites traffic including internet ...

We are switching providers & need to know if I can route/NAT both providers at the same time. By having both providers connected on different interfaces it would give me the ability to test the new ISP & would give me the flexibility to make changes ...

Has anyone been able to modify the look & feel of the Network User Authentication screen provided by the PIX/ASA when using the aaa authentication listener commands?It's located at: http://IP_Addr:port/netaccess/connstatus.htmlI'm aware that you can ...

I have an ASA whose end of access list for a group doesnt showup the implicit deny ip any line.I believe this is by implicit built in, but it doesnt show up in config.Does this require to be added in manually at the end of acl & should it be appended...

Hi all,I have a ASA 5510 with 2 interfaces outside that 2 internet links are connected it.I need to do that a host in inside netwok goes out by a interface outise and others host goes out by other interface.Someone know how can I to do this?