Network Security

I have 2 unit ASA 5520 with AIP-SSM-20 for front-end and 2 units ASA5520 with AIP_SSM-20 for back-end.I also have 2 units catalyst 6509. How should my design looks like.

IDS is not generating events. Following message shows up in the event log.evError: eventId=1230128220192233058 vendor=Cisco severity=error originator: hostId: SI-IDS01 appName: mainApp appInstanceId: 397 time: Feb 10, 2009 04:51:02 UTC offset=-300 ti...

Dear all,I am having problems getting DHCP relay working at a remote siteAt the Main site i have a Windows 2003 DHCP Server behind a VPN Concentrator 3005At the remote site i have a Cico PIX 501.The VPN is workings correctly and can ping from both en...

I have a 2811 router with IP Inspect enable for Ingress traffic but it is quite generic:ip inspect name firewall tcpip inspect name firewall udpip inspect name firewall icmpip inspect name firewall dnsint Serial1/1ip inspect firewall out Inspection n...

When trying to connect to an ftp site, we never get the login prompt back. We have a Cisco ASA 5520 running 8.0.3. We can send to other ftp sites.FTP works fine to the same site from 2 of our other locations, running Cisco Pix 515 6.3.We do have the ...

There is this website that always capture the internal IP addresses of my network instead of the public IP address on the outside interface of the PIX firewall.Please, I need to stop this issue fast. Any suggestion?

I have a question I have a pix 515E and what I would like to do is allow a certain subnet out to only talk to a specific subnet out on the internet how would I do that? So for example I have a user subnet on the 10.255.186.0/24 subnet and would like ...

Hi,I have a Cisco ASA 5520, I have a 3750 with VLAN's connected to the firewall and one of these VLAN's is a remote network.At the moment their router is not managed by us and this remote LAN uses one of our DHCP servers within the firewalls inside i...

Hello, My client has SSL VPN enabled on his ASA. THe client wants to prevent brute force attack to the SSL VPN. He is using ACS for user authentication with max failed login limited to 3 attempts. However, if the username is not in the database ACS w...

Good afternoon (or morning depending where in the world you are).Can anyone help me with the following?We have a requirement to implement connectivity to a number of partner sites from a number of our satellite sites. Traffic will be varied but will ...

Webserver Real Inside address: 192.168.0.100Webserver static translation address: 999.25.160.166.I can ping 999.25.160.166 from Internet and remote desktop access server 999.25.160.166 with port 3389 .But I can not web access server 999.25.160.166, a...