Network Security

On an IPS is there a way to create a filter so that it will not trigger any signature based on a specific source IP?So for example no signature will fire for source ip 10.1.1.1

I've heard that with a ASA 5505 the Security Plus lincese is required to pass traffic from LAN to DMA, DMZ to LAN. Is this the same with the ASA 5510?I have the ASA5510-Bun-K9 version

Good Day,Let me preface this by saying that I do not have control over our router and getting any configuration changes would be problematic. (strange but true)We currently have four subnets w/public IPs connected to 4 of the router ports. We are con...

Pix 515E 6.3(5)I need to permit my users access to an external website that uses port 8090.Would this be correct?access-list permit tcp 192.168.1.0 255.255.255.0 any eq 8090Would I also need: Fixup protocol http 8090Thanks.

we are using 3rd party ipsec in transport mode from client to server, but when i put ASA 5520 with dynamic NAT , client is not establishing ipsec communication with server even if everything is allowed. How can the client connect by NAT with ASA 5520...

I have set up an IPS senor and was getting a lot of alerts generated for signatures 12673 (Recognised Content type) and 12676 (Request method not recognised) these are generated when SMS clinets communicate with the SMS server.Analyses showed the con...

I would like to form a vpn between cisco pix 515 and watchguard 1250e. For some of the reason, I would like to route port 80, 443 services via watchguard to access the internet.I have success to make a zero route to route all traffic via watchguard t...

Hi Forum,¿How do I configure the firewall to let traffic by dynamic MS-Rpc ports (>1024) between member server in DMZ in DC and intranet?¿The Service Policy Rules would provide for that purpose?Thanks for all.

I'm trying to all all inside access to the DMZ and the internet. DMZ has web server and Email.Followed a document from cisco...I'm attached a config.Can browse internet from both DMZ and Inside networks. I will rate high for any assistance.

Hi,Is it possible with the ASA5500 to allow only connections initiated only from one side (e.g. inside)? No NAT involved!Thanks.Gabi

In a ZBF (IOS 12.4(20)T1, what happens if the following class-map is used in a policy which is tied to a zone pair and an interface, but the class-map does not have a "match" statement under it? Is the default to drop all since there is no match? O...

Dear all,kindly show me what could be the cause of ASA5550 restarted suddenly. and where can I see the logs of it and how to rectify.thanks & regards,

Hi everybody.Having used iptables and sofware firewall (like astaro) in the past , now I 'am tring to understand nat on a pix 6.3I'm tring to redirect conexions to ports on externals ip addresses to a server with an internal ip I mean:the connexion...