Network Security

We have auto update configured on our IDSM-2 and monitor with the IME. Since the upgrade to Engine 3 and the latest signatures autoposted today, we notice on the IME it will stop monitoring, all lines will go flat and eventually all gadgets will go b...

Dear marcabal I have Cisco IPS 4240 Version 5.1(5)E1 , signatured S288 the license of which expired this year ; however i want to upgraded it to Engine E2 followed by E3 .Please let me know if i will be able to accomplish this without licenseAlso let...

Hi,I have a IPS 4260 running Version 6.0(5)E2.One of the sensing interface is "UP", but the data is not flowing through. from "show tech-support":-Missed Packet Percentage = 100However,the link status is "UP". How is the possible problem, and how i c...

Does the PIX or ASA models support multiple simultaneous IPSec passthrough connection from inside to outside? Any information would be appreciated.

Is there a possibility to read the firewall configuration over snmp and write it down to a tftp server? The customer has two firewallsystems and want to save the configurations daily to a tftp server. He has a linux server to provide the snmp and tft...

HiWe recently had a surge in outside xlates and the counter for xlate most used shot up to 65700. Out average xlate count is 1500 and this makes the xlate monitoring graph hard to interpret.Is it possible to reset this "most used" counter?RegardsFred...

Hi Team,I am unable to access/create email profile thru outlook (win 200 server) with the below policies..source my machine-->destination exchange server & dns server -> ports as given below11025102512261225122612281351445465585993995domainBut when i...

Can someone tell me what key structure is used with ASA devices and 3DES? 2 keys or 3

hi all, if we use a ASA, application layer firewall, how does things like gotpmypc remote access software manage to tunnel through it, i would of thought the http inspection would block it, what exactly happens ?

HiPlease let me know if i want to enable frag guard , what are the advantages and disadvantages of implementing the same .For eg: will enabling fragment protection on a particular interface of the firewall (say outside) may also lead to genuine packe...

I've configured IOS Content Filtering (see attached configuration fragments). And inbound SMTP sessions can't be established now. What's wrong?

I've searched Cisco high and low for a document that outlines how I go about upgrading an ASA 5500 pair running in active/standby mode, from 7.1 to 7.2 code. Seems like it should be a simple task but I can't seem to find it. I need an example of how ...

I am attempting to setup a config on a Pix 501 with Cisco VPN Client. I can get connected (authenticated) remotely with Cisco VPN Client, however I cannot seem to get any traffic to the remote LAN. When I look at the statistics in the VPN client the ...

Hi Can someone please check this config,We have this asa5510 as our default gateway (10.0.0.1)We also have a 2821 router running cme with two sub interfaces (10.0.0.3 & 192.168.100.1)I have added a route on the asa to 192.168.100.0 but cannot ping to...

Greetings All, Can someone confirm or give me the correct NAT processing order? From what I recall this is the orderNO NAT Static NAT Policy NATThanks in advance