Network Security

Hi folks,<br />I got curious after enabling and loading IPS signatures into our routers. I used the latest IOS-S376-CLI.pkg file to load basic signatures set. Now then I have signature definitions files in the routers flash in xml format. <br />How a...

We have upgraded pix 535 from 6.3 to 7.2 after which we are seeing high CPU utiliztion, system has 1Gb of RAM. If we verify in the pix it says more of the process is taken by "Dispatch Unit". pls can some help on this.--srini

I am getting the following message in PIX-515 log file:[ Scanning] drop rate-1 exceeded. Current burst rate is 10 per second, max configured rate is 10; Current average rate is 2 per second, max configured rate is 5; Cumulative total count is 1283Pix...

I am going to test the ASA performance to see how much heavy load it can handle especially for vpn traffic. The only command I knew areshow cpushow memoryIs any other command I can use to check the performance? Also, what's the recommend threshold fo...

We have established an MPLS connectivity towards the remote client end. All users in the LAN are able to access the remote end servers through PAT over the MPLS circuitnat (inside) 10 access-list mpls_trafficglobal (MPLS) 10 interfaceThe problem is t...

ASA5510 with ASA-SSM-10ASA 8.0(4), ASDM 6.1(5)51IPS 6.2(1)E3, IDM 6.2(1)some "cosmetic" problems, but they do confuse the operators:1.neither ASDM nor IDM reports on the "Licensing" gadet the correct "Auto update" status. It is reporting "Not checked...

Have any of you ever used TPM to secure a VPN connection into a corporate network? I'm interested in doing two factor authentication. Ideally, only laptops that I authorize will have access to the VPN tunnel. If the laptop were to be lost or stolen I...

Which device should I buy for a small Mac network?I will have one Mac getting data from a VPN, and another Mac accepting a forwarded 80 port answering the browsing clients. I have to control the whole system remotely, probably by a forwarded port 590...

Hello folks,I am trying to block messenger using Zone-based Policy for certain users from the local network. This is still lab environment recreation for a customer. It does not seem to work and I am not sure this is the right way of doing this in th...

Hola tengo un pix 515e. Tengo asignadas 5 direcciones ip públicas asignadas por mi isp y necesito poder administrarlas con el firewall para poder hacer Nat, etc. Utilizo el software ASDM de cisco y quiero saber como configurar esas ip sobre mi inter...

What is the definition of Static Identity NAT ? I am not able to find much explanation on it. Is Static Identity NAT available/required in FWSM.

I am able to access remote access vpn.After logging vpn connection,I am unable to access inside the nework.

Hi , I set and installed a ASA 5530 to replace our aging PIX. Now I am trying to use it to replace out old Nortel IPSEC based VPN concentrator. I want to use the Cisco IPSEC vpn client. When I install it I do not see anywhere to specify or use a user...