Network Security

Here's the logical topology:ASA--(nlb)--(isa nlb)--ISA(primary)----------(isa primary)(The diagram doesn't appear correctly in the forum: ASA has three interfaces (outside, nlb, primary); ISA has two interfaces (isa nlb, isa primary); isa nlb is conn...

Hi all..How can i achieve a continuous packet capture without fillup up my pix buffer? I've set the buffer to 99999999, but the capture fills up within minutes.Is there a way to push these results to a monitoring computer unattended? I know i can bro...

ok i got the ASA up and running and our license PAK came in and it says to go to http://cisco.com/go/license which i do run through like the wizard, at the end i get thisWrong Sku(s) 'ASA5510-SEC-PL=' for 'ASA5510-AIP10-K9'Serial Number = xxxxxxxxxxW...

We have 2 x ASA 5550 - they have 1GB Lan interfaces. Should we use a spare GB ethernet interface on each box for LAN based failover given that the managment i/face is only 100MB? I think we can use a x-over ethernet cable bewteen both firewalls for l...

I have this configurationHost 172.16.1.0/24 > ASA A > ASA B > Host 172.16.2.0/24I have an FTP server at 172.16.1.254 behind ASA A, how to authorize host 172.16.2.0/24 to connect on FTP server?

I've got two 2600 routers connected to each other using site-to-site vpn. Problem is the connection goes down after a while. When I first start the routers the connection is there, but I come back half an hour later and there's no tunnel, neither rou...

I try to connect on outside int with SSH, I have following message.No translation group found for tcp src inside:172.16.1.2/2737 dst outside:172.16.0.6/22

Dear All,I am novice in the security, excuse me if my question is very basic.I want to configure IPS on Cisco 2821 router. I do not have any server for storing the logs.Kindly let me know:Is it possible to configure IPS on a router 2821?Is it going t...

Hello, we seem to have experienced a problem when upgrading some of our Cisco terminal severs (3845s) to c3845-ipbasek9-mz.124-21.bin.Certain Terminal lines would say they were in use when trying to connect. Any ideas?

Hi,I have an IPS 4255 it is used to inspect traffic to the internet. it is used after the firewall. The internet traffic is around 40 Mbps. When i inspect trafic the procesor is around 90 percent and the inspection load is 30 percent. after about a d...

Guys, I need help on how best to integrate Cisco ASA firewall with with IBM virtualized servers. the servers form a 3-tier system ( GPRS Cocentrators | Application severs | database server ). The GPRS Concentrators are on separate physical servers wh...

Hi,when will it be possible to configure multicast-routing on a FWSM running in multiple context routed mode ?Currently it's just possible for single routed modeThanksMatthias

I am trying to get a few workstations to ping and traceroute to the Internet via an ASA5520. I have a permit ip any any for all incoming traffic hitting the inside interface and still unable to ping\traceroute the Internet.any idea?

I have a RHEL3 WS host running Cisco Security Agent Version 5.2.0.225. From time to time I am seeing alerts that don't make sense.For example, see these alerts:TESTMODE: The process '/bin/echo' (as user root(0) group root(0)) attempted to accept a co...