Network Security

We wish to include the following address space in the vpn's "interesting traffic"192.168.16.0/24 - 192.168.254.0/24and exclude192.168.0.0./24 - 192.168.15.0/24What is the correct acl -- ip and wild card mask? e.g. 192.168.16.0 0.0.15.255, which isn'...

How to log session when password recovery is done on idsm

Hey guys,I just purchased the CSM 3.2 enterprise. We currently have the 5 device license. I was wondering, does the software that I got from cisco capable of being a completely new install or is it just an "upgrade" package. I was thinking about buil...

I've moved a dial-in PPTP config from a PIX to a IOS router, but I cannot find the equivalent IOS commands for the PIX config:vpdn group 1 client configuration dns x.x.x.xandvpdn group 1 client configuration wins x.x.x.xAnybody know what the equivale...

I have CSM 3.1 currently running on a server. I have installed CSM 3.2.1 on a new server. How do I move the IPS devices from the 3.1 server to the 3.2.1 server? Discovering the devices on network fails.

FYI..Does anyone know what needs to be passed thru the ASA firewall to allow access for people with iPhones? TIA, Gary

Please let me know if Cisco IDSM2 logs can be forwarded to the Syslog server or not . I know that the IPS logs cant be forwarded to syslog Ankur

Dear All,I am really newer for ciscopix. but I did attached configuration for pix. I have windows 2003 SBS ip address 192.168.23.6 behind pix. static nat to inside webserver from outside good working. but only not working from DHCP users of Windows s...

Hi!I have a weird problem that began after I upgraded a PIX 515 failover pair from 7.2(2) to 8.0(3). Everything seems to work OK, except remote management via VPN-client.I've tried telnet and https but once the management connection is established th...

Hi, I am currently filtering users web sites internally via a product called Surf Control (now owed my Websense). The thing is I have now configured the ASA to accept VPN connections from users. They can get access to the internet but it is not mon...

Hi all, I know the asa randomizes the tcp sequence number, what is the beneift of this ?