Network Security

Does anyone use or know of a good forum, associated with Cisco or not, that is dedicated to discussing ips signatures? I am tasked with tuning fired signatures (IPS4260) and it would be nice to bounce specifics signature details off others experience...

All,We have a proxy server in-house that forwards to a web filtering service out of our network. Management wants laptops to be controlled while out of the office, but the company that filters web traffic charges extra per user for this functionality...

We have two VPN tunnels one is using site-2-site and the other is using easyvpn. They both terminate on the same interface, and we of course have the same-security-traffic commands entered. We have several VPN's terminating on these interfaces that c...

I am moving Vendor B connection from a DMZ port on Loc1ASA5520 to the outside interface on Loc25505. I believe I am duplicating the configuration However, it does not seem to be working properly.I have the following global NAT configured global (outs...

Has anyone had any actual problem as a result of using a crossover cable for LAN based failover between ASAs?The documentation "recommends" that you do not use a xover but rather than you go through a switch but this seems like a bunch of unnecessary...

Are there any additional sources of information for creating custom signatures for IPS? I am working with a SSM-10 module in an ASA. The product docs are great for install and basic tuning but I need a bit more for signatures/actions.We are trying to...

Been struggling trying to get cpu utilization via snmp on ASA 8.0. I've tried using cpmCPUTotalEntry 1.3.6.1.4.1.9.9.109.1.1.1.1.3 but seems to be deprecated. Anyone have this running?

I am unable to allow an inside host access to the DMZ. I have ip any any access lists set up on both interfaces and the following static "static (inside,dmz) [internal_ip_subnet][internal_ip_subnet] 255.255.255.0

I have 3 windows 2003 terminal servers setup for load balance using Windows Network Load Balance Manager. IP addresses 192.168.1.14, 192.168.1.15, 192.168.1.16 Cluster IP 192.168.1.40 multicast. I have a remote site connected via site to site VPN tun...

Hi,I am using ASA 5520.Is it possible for me to terminate 2 or more than that isp on and run it as load share and failover?Failover can be worked out with two isp..I want to use it as load hsare and aggregation too.If not is there any alternate solut...

Hi,I'd like to apply individual shaping for different classes of traffic which are traversing an ASA.The documentation of ASA (8.0) tells me that "Traffic shaping must be applied to all outgoing traffic on a physical interface or in the case of the A...

I have a number of devices on the DMZ with a number of permits, but I see that last permit in the ACL is :access-list dmz_incoming extended permit ip any anyI would like to get rid of the ACL for the obvious reason but when I do, the devices are unab...

The Maximum 3DES/AES VPN throughput on ASA 5505 is 100Mbps, what is the SSL VPN throughput performance on ASA 5505?Any 64 byte Packets per second(PPS) value on ASA 5505 SSL VPN?