Network Security

greetingsI have pix setup to send logs to syslog server.currently i have logging trap warnings.how can i only log access-list violations. I don't need the other info.tnx for insight

I tried to run the above debug to get insight into zone based policy firewaling and it spiked the router to 99%. Most of what got logged were these rate-limit policy messages such as below. But I don't have anything purposely rate-limited. What ar...

Have a site to site tunnel between routers and the mail between the sites won't flow both are exchange servers in the same routing group. I have to tunnel between the sites wide open IP and still nothing.

Could anyone tell me how to read additional data other than the data in the context data packet. I need to read the rest of an http request but I am unsure how to go about doing this.It shows part of a string where an SQL injection attempt was but d...

Please tech me the following config line."service-policy global_policy global"Is this configuration necessity?If I delete the configuration line, I have any troubles about FireWall Technology???

Right now, I have a PIX that tunnels back to another network for only certain private subnets. For all other traffic, they go straight out to the web. I want to force that other non-VPN traffic to go to one public address only.I would like to do this...

Can anyone tell me a good way to load balance outbound connections between 2 different sites that are connected with high speed fiber metro links? I have 2 sites with the same ISP providing outbound access at both sites. Each site has users and ser...

http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a00808c38a6.shtml#config3I found this documentation on Cisco's site. Does anyone know how to add expressions to the ASA? I'd like to block Limewire on top of some of the de...

Hi,For me to get the tracert to work through my Cisco ASA and any DMZ/Sub Interfaces i had to create a rule on the inside and other interfaces:permit icmp any anyIs this a security risk or can I leave these on each interface?

we are using external user DB to log into the Network devices to authenetication.I want set enable password on the ACS, I found from ACS server configuration page:"Configure Enable Password Behaviour:For newly created dynamic users, the TACACS+ enabl...

Hello allWe have recently upgraded our Internet capacity to 100/100 from 10/10.Problem is that we only get 50Mbit upload, 10-13 Mbit download.I got those results having the PC behind the pix. I also moved the laptop outside the firewall and got 80/80...