Network Security

there a doc in cisco which speaks of configuration of backup links.question;sla monitor 123 type echo protocol ipIcmpEcho "IP address" interface outside num-packets 3 frequency 10 The ip address can be any ipaddres on the internet ?What happens if i ...

I have a remote site that I need to block some outbound Internet traffic. The site is setup as a PPPOE for Internet access via a DSL modem and they have a T1 connection to the corporate office. I have an ACL setup to take care of Inbound Internet tra...

i have a IPS 4260, running Version 6.0(5)E2.I have noticed different duplex on the interface.My understanding based on the logs below:The interface below seems to be running in half duplex, but they are configured for full duplex.-GigabitEthernet2/0-...

Hi,I've Cisco Security Manager Suite with IPS Manager.I want to add a sensor...I go to Devices->Sensor as suggested by User Guide.But when I open the page i don't have the Add function, but only Re-Import and Reboot...Why?I've not powered on the sens...

Dear All,When i am trying to access one server which is above my ASA i am getting the following error.=======================Dropping TCP packet from Outside:10.20.8.52/30000 to Inside:10.20.0.243/34538, reason: MSS exceeded, MSS 1380, data 1436=====...

Hi All, I have two ASA as active/standby failover. these two are connected to 3750 switch through trunk port that carry vlan 10,20 and 30. I want to deploy IPS in between with inline mode. I am little confuse how to connect IPS here. should it be con...

Hello, we are deploying Cisco 871 routers to our customers, we do a simple IPSEC point to point VPN connection. We want to ensure the VoIP traffic is granted over the data traffic.I did this config but I don't know if I'm doing it right, because I th...

Hi,I've a IDSM-2 module (installed on a Catalyst 6500).This module is PowerDown; when I issue the command "power enable module .." the module can't be on line. I see this message on logging: %C6KPWR-SP-4-DISABLED: power to module in slot .. set off (...

Hi All, Can I use inline pair in IPS as trunk? The IPS is connected to ASA in one end and connected to switch to another end. I'd like to use inline pair but I am not sure if it can pass all vlan traffic. thanks Alex

Hi Everyone, I followed some sample configs online and configured my c1841 router to acceppt VPN Client connection. Now I'm able to connect the VPN Client to the router and able to ping the router's LAN IP address, but I couldn't get to any other com...

We have an ASA5520 running 7.0(4). This firewall has several static translations and it is announcing these out the outside interface via OSPF. I recently tried to upgrade to 8.0(2) and the firewall stopped announcing these translations. Why did this...

Hi all,I am looking at implementing an ASA system for multiple branches (17) in a client site.I know that the ASA 5510 can have the AIP-SSM module installed, where the 5505 cannot. I want to be able to offer firewall, an IPSEC VPN back to the hub sit...

Not a strong security guy here so please bear with me.I want to give access to limit pools of clients via my ASA with high security (ie ssl vpn). These clients would hit their designated pool of systems.Each system cannot see each other as for instan...