Network Security

Hello,on a point to point connection with a 5510 Firewall edition on each end does it make sense to add an IPS module on both 5510s or just one side? Perhaps there is a way for the one IPS module to monitor both sides and automatically terminate traf...

Anyone got a template or script which would modify the necessary registry settings so that clean access agent will notice when the vlan changes and then would refresh ipconfig?I've deployed the NAC 4.1.3 in a OOB Layer 3 with central CAS deployment. ...

Hi allI was wondering whether it's possible to define a same subnet that exist on both the inside and outside interfaces on a PIX 515 running ver 6.3(4). For instance a subnet of 10.10.1.0/24. I'm setting up the PIX to receive RIP routing update from...

We have 3 remote sites all with ASA 5505s. We plan on enabling webvpn on each of them. We currently have it enabled on the ASA at our coporate office and have it authenticating using an RSA device. My question is does anyone know of a way so that our...

Dear all,    i have PIX 515e with SW 6.3(5).there is a patting rule with one global IP.LAN users tried to contact some site with very large delay ,when i clear xlate and arp the time needed to open this site decrease from 2 minutes to 40 sec.please f...

Dear all,    kindly i need your help regarding a strange problem.i have 2 servers on different DMZs on FWSM.the traffic between the two servers are normal but when i isuue a copy from 1st (172.29.106.33) to 2nd(172.29.107.45)the ping between the two ...

Hi,I have a lan to lan scenario. The central office has an ASA5505 and the remote office has an SR520. The VPN connection is functional. My problem is about once a month or maybe more often (seems random) the remote office will lose connection to sof...

how i monitoring IPS 4260.and how to save generated log ?how i connect monitor on IPS to seen LOG file.

Hi all,here it's my scenario:Cisco VPNClient--> INET --> Cisco 877 -->ASA 5520.And I can't connect with the ASA.I make a test with this scenario:Cisco VPNClient-->ASA 5520. and the VPN works.I think the problem it's on the router ¿what ports must I ...

Hi all,I have some trouble and I have no idea now ...I have the following network :------------------------|-------------| <-Inside-> Cisco 1800 <--> Private VPN <--> FTP ServerFTP Client <-DMZ-> | ASA 5510 |------------------------|-------------| <-...

Hi Friends,The 281 router has been shipped with AIM-IPS module but when i issue the "show inventory" command it doesn't list the AIM-IPS module.Its not listing show run also.but in show tech it shows the AIM-IPS module in slot0.how to get this module...

Is there a Cisco best practice for how often IPS modules should check for updates?

Hi all,I am having some basic doubts regarding the functionality of the sensor.case 1------Assume that sensor is in inline mode.Then1) By default "stop" atomic attacks2) By default "stop" attacks that span multiple packets3) By default block IP addre...