Network Security

the ips goes to critical when any medim attack is generated , is there any option that we fix the limit that after 5 or 10 attack it goes to the critical one.

Recently I had a Cisco engineer from Ingrammicro, the largest Cisco reseller here to configure my newly purchased ASA 5505. I am still using the default 2-user license until my new license is ready in 2 weeks. Running ASA Version 8.0(4) and a valid S...

I have 2 ASA's. 5505 and 5510. Ipsec tunnel between works. Ping from inside to inside was working until I turned on split tunneling for ssl clients. It changed my config and for the life of me I cant get it to work again. I can ping from lan of 5510 ...

HiWe have one Pix sitting as f/w for our servers. I now want to configure another pix, whose outside interface is on the same subnet as the inside interface of the first Pix. The second Pix will be infront of our LAN, so you can consider the servers ...

HiAs the title says, we cannot access out DNS server which is 192.168.7.199 from any other hosts behind the PIX in the 192.168.7.0/24 range.i have been through the document which talks about DNS rewrite and hairpinning, but neither seem to work. I th...

Hi,I am facing problem in accessing IPS through web & ASDM/IDM. I can even telnet port 443 on IPS from my PC. Just to let you guys know that I am able to access all other IPS in our network using the same browser & IDM.I have checked all JAVA related...

We are running a IDSM-2 module in a 6509 with vlan inline interface pairs.Everything looks fine until we try to join a server to the 2003 domain.I can't see the IPS dropping anything, but we get "network path not found" after entering the credentials...

Hi Team,I'm willing to prepare IPS Exam (for my CCSP). could you please recommend me best practices/reading, or LAB or Simulator... to be ready to pass this Exam.in http://www.cisco.com/web/learning/le3/current_exams/642-533.html I don't have enough ...

Hi,I'm a newbe to Cisco and have just bought a ASA5505. I would like to upgrade to the latest firmware and have now spent about 45 min on various Cisco pages. First registering as a user and then searching for firmware. Can someone please show mercy ...

Hi,We are running a NAC appliance and are currently using it solely for access control, no posture assessment etc. It seems take about 20 seconds to login after you click 'login'.Can this be sped up?

1. When I deploy NAC, a PC or user device is on the certified list. If User device is infected by virus, NAC Server can recognize device which is infected and prevent PC or not when I deploy out-of-band (not in-band)?2. When I deploy out-of-band, cis...

Hi Experts,One of my connectivity project i am working on requires traffic flowing through the ASA to reach the server sitting behind the ASA. However, the source of the traffic has IP address in the Private IP ranges. As our organization also uses s...

Hello all, I'm trying to test new phone-proxy feature and I can't make it work. Phone shows registering and nothing happens. I've attached config, it's a copy from Cisco websiteHere the debug from debug phone-proxy:PP: 192.168.1.5/49162 requesting CT...

Is there any reason that the 5505 can't support IP phones on the non-POE ports (so long as we have power for the phones, via power cubex)? Does the ASA support native vlan? We would like to plug phones into ASA and PC's into back of phones for bran...

Hi Experts,I am working on establishing a connectivity for one of our clients. I have built an IPSec VPN Tunnel between our office and Client's office. However, i need to do many to one translations of the client's private IP addresses which will be ...