Network Security

First I hope this is the right place for this...Anyway, I have a ASA 5520 that we use for both SSL (AnyConnect) and WebVPN VPN access. I have it set up and running smoothly (knock on wood) with several connection profiles and group policies. I am try...

In working around with internal website resolution vs external websites and DNS resolution my team has decided they'd like to have internal machines access DMZ resources by their external IP rather than the local DMZ address. I'm not quite positive t...

We are about to test VOIP solutions and have been advised that we need to enable SIP on our ASA 5510's in each site.Are there instructions on how to enable SIP?

Hi,Would like to know how to allow access to or from dmz network?Few question;1.As traffic from high securtiy level to lower flow without any Access list,then can't it be from inside interface to dmz by default?2. If not,how we can allow access to dm...

Hi,We have two 6509 switches and one IPS 4260 appliance (to protect servers).All the servers are homed directly on to the core switches. There is no server agggregation switch.So we plan ti use the IPS in promiscous mode.The server vlan will be on HS...

Would any of you know if the ASA 5500 family support multiple PPTP/L2TP - VPN client connections from inside to outside (i.e. private network to the Internet)?We currently have a PIX 506E and it doesn't support more than 1 PPTP/L2TP connection at onc...

Is it possible to discover S2S-VPNs with the CSM 3.2.0 ? We have several ASA-Systems up and running, which are currently managed with die ASDM. We want to integrate them into our CSM with policy discovery, but the S2S-VPNs never seem to be grabed.

I have done a previous search and realize that there is no good way to convert Snort signatures to Cisco IDS/IPS custom signatures. I was wondering if anyone has ever converted the Snort "state-based" TCP string matched signature into something that ...

Hi Team,I have a Cisco IDS 4235 device with license "<LicFileID>20040416051341665".Software Version is 4.1(5)S227 (IDS-sig-4.1-5-S227.rpm.pkg)I know that signature update is not possible for 4.x and thats the reason why Im going for 5.x & then to 6.x...

Is there a way to continuosly monitor the external interface traffic usage and save the results to a syslog server, in order to be able to assess bandwidth usage?

i have a pix 506e in front of my network i have several servers in my network, but there are 6 servers that i am concerned about.is it possable in the pix to put those 6 internal ips in a group and have that group use nating through 1 IP address?

Which Cisco firewall can be pitched against Fortinet UTM box??

Where do you pull statistics on the ASA to determine my current teraffic patterns to a DMZ server so I can estimate reasonable values for connection limits?