Network Security

HelloI'm working on an SSL VPN anyconnect service and our Security team are looking for the service to give VPN users the same IP everytime they login (ie VPN users will have a static IP). We have an ASA 5505 which authenticates against a Cisco ACS 4...

My router doesn't block sites which belongs to category which I whant to block. I don't know these sites simply don't belong to that category or something is wrong. Can I check the URL manually on Trend Micro server?

Hi,I am using 7.0 on PIX 535A and have 4 different subnets on 4 physical interfaces 10.5.2.144/28, 10.5.2.160/28, 10.5.2.176/28 and 10.5.2.129/30. These interfaces are at same security level 100, I have enabled "same-security-traffic permit inter-int...

First I hope this is the right place for this...Anyway, I have a ASA 5520 that we use for both SSL (AnyConnect) and WebVPN VPN access. I have it set up and running smoothly (knock on wood) with several connection profiles and group policies. I am tr...

In working around with internal website resolution vs external websites and DNS resolution my team has decided they'd like to have internal machines access DMZ resources by their external IP rather than the local DMZ address. I'm not quite positive ...

We are about to test VOIP solutions and have been advised that we need to enable SIP on our ASA 5510's in each site.Are there instructions on how to enable SIP?

Hi,Would like to know how to allow access to or from dmz network?Few question;1.As traffic from high securtiy level to lower flow without any Access list,then can't it be from inside interface to dmz by default?2. If not,how we can allow access to dm...

Hi,We have two 6509 switches and one IPS 4260 appliance (to protect servers).All the servers are homed directly on to the core switches. There is no server agggregation switch.So we plan ti use the IPS in promiscous mode.The server vlan will be on HS...

Would any of you know if the ASA 5500 family support multiple PPTP/L2TP - VPN client connections from inside to outside (i.e. private network to the Internet)?We currently have a PIX 506E and it doesn't support more than 1 PPTP/L2TP connection at onc...

Is it possible to discover S2S-VPNs with the CSM 3.2.0 ? We have several ASA-Systems up and running, which are currently managed with die ASDM. We want to integrate them into our CSM with policy discovery, but the S2S-VPNs never seem to be grabed.

I have done a previous search and realize that there is no good way to convert Snort signatures to Cisco IDS/IPS custom signatures. I was wondering if anyone has ever converted the Snort "state-based" TCP string matched signature into something that...

Hi Team,I have a Cisco IDS 4235 device with license "<LicFileID>20040416051341665".Software Version is 4.1(5)S227 (IDS-sig-4.1-5-S227.rpm.pkg)I know that signature update is not possible for 4.x and thats the reason why Im going for 5.x & then to 6.x...

Is there a way to continuosly monitor the external interface traffic usage and save the results to a syslog server, in order to be able to assess bandwidth usage?

i have a pix 506e in front of my network i have several servers in my network, but there are 6 servers that i am concerned about.is it possable in the pix to put those 6 internal ips in a group and have that group use nating through 1 IP address?