Network Security

I have an ASA 5520 with an SSM-10 module.ASA is running 7.2(2)10 and ASDM 5.2(2)The IPS is running 6.0(5)E2I want to upgrade the IPS engine to 6.1(1)E2Is ASDM 5.2(2) compatible with this?Thx,Greg

I have a PIX525 running 8.0(3) with 256MB RAM & running Restricted License.When i use OUTSIDE Interface NAT the NATing works fine.But when i user any other Global IP for NATing it's not working.Pl. help.

I have a unique requirement for my ASA PAT configuration...By default a Cisco router running IOS will utilize the SAME port when creating a dynamic PAT. i.e. the inside hosts request, generates a dynamic PAT, where the requests source port, is the po...

Hi,I have an ASA 5505 ver 8.2 with inside network 192.168.20.0/24 and 192.168.20.254 configured on inside interface.Also I have an outside interface 10.10.10.1/24 with default gateway 10.10.10.254 assigned on ethernet of router.On configuration I hav...

I have a unique problem. I lock myself out of the pix on any interface via ssh,telnet etc . I'm trying to connect directly but logging console is enable and the amount of logs makes it impossible to do anything. any ideas on how to stop it other than...

If a default action on a specific signature is configured to "produce alert" only, why is it that the IPS will also Log packet from the attacker? I would have thought that this would have required that the action "Log attacker packets" be selected a...

I am setting up a VPN tunnel between two sites and I must be able to pull DHCP addresses across the tunnel to my client devices. At the remote end I have a DSL router in bridged mode connected to a ASA firewall. My client devices are connected to a 3...

I have to do password recovery for IDSM-2. I have read the document available for password recovery. It shows that i have to re-image the IOS because i am unable to log into IDSM-2. Will Re-image will disturb the normal communication of the switch an...

Running 6.0.5 E2Sig release S342 contains a new signature (6964 - Asprox injection attempt). I want to tune the signature but can't find it in the signature definitions (sig configuration) section. In addition, I can't find this signature in Cisco'...

Hi, I just wanted to know if the 4240 IPS can be configured to monitor(inline) an etherchannel port? If yes, where can i get a guide?Thanks in advance!

Hi,I have an ASA that is using ACS as the radius authentication server.My problem is with VPN remote access.When i configure group-policy external and use this policy as the default policy for the tunnel-group (i download the VPN attributes from the ...

Hi Netpros,I have PIX Firewall 515 Version 6.3(5)I have to use the 'clear local-host' command quite often on daily basis in order for the users to connect once again. What could be the reason behind this? Any help greatly appreciated. RegardsFaiz

Hello all,My PIX 515-E (7.2) blocks IP addresses assigned to Remote VPN users. It seems that blocked IP address are chosen randomly and they are accumulating overtime. I didn't pay attention to it until number of blocked IP addresses become signif...

ciscoasa# sh verCisco Adaptive Security Appliance Software Version 8.0(2)Device Manager Version 6.0(2)Compiled on Fri 15-Jun-07 19:29 by buildersSystem image file is "disk0:/asa802-k8.bin"Config file at boot was "startup-config"^^^^^^^^^^^^^^^^^^^^I ...