Network Security

Hi,is it true that we can only use supported ftp servers that are documented in cisco for updating ips signatures or image?###cisco ips 6.x document ####The following FTP servers are supported for IPS software updates:• WU-FTPD 2.6.2 (Linux)• Sol...

I am able to get some websites to come up, but after a long time loading. Here is my config. What am I missing? I am able to RDP inside to the server named xxx-SQL01 and use ASDM and telnet to manage the firewall. The connection stays up fine, I ...

Hello all,I'm trying to get working NAC Appliance 4.5 with WS-C4506-E with MAC notification without any luck. It seems that C4506 detects a MAC change, sends a SNMP trap to NAC Manager and according to what I was able to sniff directly on NAM via tcp...

FWSM in multi context mode and routed mode.I'm coming from checkpoint world and there we have VRRP gateways we handout to clients/servers. Going through a config guide for FWSM I see the following.My quiestion is which address will be handed out to t...

Hi,We are using HPDeskjet printer inside the firewall and unable to access from outside for sharing the printer.please let me know which port has to open form oute side to inside ?Rgs,

Hellow everyone,Im facing some problem alerts not coming in IME (6.1) from the Cisco IPS 4240 (5.1.7E1). Once I reboot the IPS then the alerts are coming and works for 3-4 days and again the problem starts.I have found one similar netpro case and tri...

We have NAC 4.1.8 OOB deployment installed and a rule to check whether kaspersky is installed in users before giving them access to the network. That's working fine. Now I want to check whether kaspersky is actually running on the user machine or not...

My main pix 506e just lost connection. Yeah the 506 that is acting as the vpn server for all of my locations. i have already checked show version and the pix did not reboot. Is there a way to tell if maybe for some weird ass reason if port e0 are e1 ...

Hello: We have to separate two networks and we're planning to use FWSM for this project. The FWSM will be implemented as transparent mode. As create a rule to allow Protocol 88 between these two networks (both networks are running EIGRP).Q: Will this...

Hello,I have a situation that I was wondering if anyone can provide some information. I currently run two ASA5540's with the AIP-SSM 20 modules in failover (active/standbye). My license has expired on the ips modules and I need to update them. How...

Can you have multiple DMZs with an ASA 5505 with Security Plus license? Currently using a PIX 506, PIX 501 and a 1605 to do this. Would love to simplify. Thanks!

I'm currently running CSA 5.2 r238 with all systems in Test Mode. I keep seeing events for certain modules loading after startup, such as pdcrypt2.sys in a Citrix environment. I know these events are normal and don't care to have those events logge...

Hi,I have a 3000 series VPN Concentrator and I am trying to get the auto-update feature to update and install the VPN Client Silently/Unattended.-MSI install-previous version: 5.0.03.0350-new version: 5.0.04.0300I've got auto-update to notify and got...

Is it at all possible to have two or more NAT translations to external IP addresses that translate to a single internal IP address on an ASA 5510? For example can 1.1.1.1 and 1.1.10.1 translate to the same internal IP address.