Network Security

Hi allI'm trying to design a data center security solution. I have a 6509 E with sup 720 and FWSM. My concern now is whether to go for IDSM or a 4200 sensor. I know about the through put limitations of both products. Can you all highlight any other p...

Today, ips-4250-sx (not-in-line) upgraded from v6.0(4)E1 to 6.0(5)E2. (S335) to (S339)1st appearance & flood of red alerts,all internal sources and destinations:1) Windows DCOM Overflow 0&1 subsigs: (1100src/100dst=86k total hits)2) Netware LSASS CIF...

Has anyone else been running a 4270 sensor in production with traffic at 1Gb/s or more?I'm interested in discovering if the symptoms we're seeing are unique with the default signature policy and 6.0(5)E2:Event Store wrapping every 60-90 seconds, maki...

My customer has an evironment with inline CAS for wireless-users and out-of-band CAS for wired users. The Wireless-controllers and Clean-access users authenticate with RADIUS and MSCHAPv2 to a Microsoft IAS 2003-server. When the users passwords expir...

I have a Pix-535. It was running fine for couple of weeks, until I turned it off and on again. After that, the pix run for 5 to 10 minutes and the begin lock out traffics and console. If I did a reboot on it, it doing the same thing.

I have setup two pix 501 running OS version 6.3(5) with a 10 user license between two offices conencted via DSL. Traffic flows both ways as intended. However, occasionaly I have a problem where I cannot remote onto any machine at the remote office fr...

I am currently implementing and testing the NAC Appliance solution for clean access. I have noticed a massive flaw in the security of this product, unless I'm mistaken. I was wondering if anyone can comment on this.In order to utilise Active Director...

Dear All,I configured the NAC HA for one of our customer. The HA is working well.When i connected the pc to the un-trusted vlan i am getting the auth page where i could get only local DB not getting the AD provider in the drop-down.How can i solve th...

I have a remote site which has low grade switches so i am unable to block devices at the switch level. Is there anything i can do on the ASA 5505 to block a specific mac address from using the internet connection. It's an unknown device connecting to...

Hello,I have a client who is changing their ISP and will be issued new Public IP Addresses. I am trying to figure out a way that we do not have to recreate all of the ACL's and Static Mappings. I know we will need to get our Site to Site end points t...

Hi all, I am trying to get a pix 6.3 to authenticate telnet users via radius with a Microsoft IAS server. This works well, but Im trying to get it where when they log in, it just dumps them into enable mode, instead of typing in the enable AD credent...