Engage with peers and experts on network security topics such as Secure Firewall Threat Defense, Adaptive Security Appliance, Secure Firewall Management Center, and Security Cloud Control.
Is it possible to discover S2S-VPNs with the CSM 3.2.0 ? We have several ASA-Systems up and running, which are currently managed with die ASDM. We want to integrate them into our CSM with policy discovery, but the S2S-VPNs never seem to be grabed.
I have done a previous search and realize that there is no good way to convert Snort signatures to Cisco IDS/IPS custom signatures. I was wondering if anyone has ever converted the Snort "state-based" TCP string matched signature into something that...
Hi Team,I have a Cisco IDS 4235 device with license "<LicFileID>20040416051341665".Software Version is 4.1(5)S227 (IDS-sig-4.1-5-S227.rpm.pkg)I know that signature update is not possible for 4.x and thats the reason why Im going for 5.x & then to 6.x...
Is there a way to continuosly monitor the external interface traffic usage and save the results to a syslog server, in order to be able to assess bandwidth usage?
i have a pix 506e in front of my network i have several servers in my network, but there are 6 servers that i am concerned about.is it possable in the pix to put those 6 internal ips in a group and have that group use nating through 1 IP address?
Where do you pull statistics on the ASA to determine my current teraffic patterns to a DMZ server so I can estimate reasonable values for connection limits?
I'm trying to add another static nat translation onto the ASA. There's already one static nat to another host. Wouldn't I just copy the same static and change the IP's? Tried it and it gave me a error. Not sure what else I'm suppose to add. Kinda los...
there a doc in cisco which speaks of configuration of backup links.question;sla monitor 123 type echo protocol ipIcmpEcho "IP address" interface outside num-packets 3 frequency 10 The ip address can be any ipaddres on the internet ?What happens if i ...
I have a remote site that I need to block some outbound Internet traffic. The site is setup as a PPPOE for Internet access via a DSL modem and they have a T1 connection to the corporate office. I have an ACL setup to take care of Inbound Internet t...
i have a IPS 4260, running Version 6.0(5)E2.I have noticed different duplex on the interface.My understanding based on the logs below:The interface below seems to be running in half duplex, but they are configured for full duplex.-GigabitEthernet2/0-...
Hi,I've Cisco Security Manager Suite with IPS Manager.I want to add a sensor...I go to Devices->Sensor as suggested by User Guide.But when I open the page i don't have the Add function, but only Re-Import and Reboot...Why?I've not powered on the sens...
Hi All,Please can someone provide me an advice on this?1. We are about upgrading our PIX 515E/ failover pair from 7.04 to 8.0x. but not sure which release has been tested and confirmed to be the most stable. I want to know which is the best version t...
Hello everyone,Is there a place on CCO where a list is provided of known viruses/worms that will be detected by the latest IPS signatures?Regards,Jesper
Dear All,When i am trying to access one server which is above my ASA i am getting the following error.=======================Dropping TCP packet from Outside:10.20.8.52/30000 to Inside:10.20.0.243/34538, reason: MSS exceeded, MSS 1380, data 1436=====...
