Network Security

Does anyone know how to trouble-shoot state condition false positives.I can't see to find in the logs what is doing this ?----------------------------------------Hosts in state condition Unprotected access detected

I want to have our 5510 detect when we are getting a dictionary attack on our FTP server. Do I need the IPS module in order to this or can this be done on the base unit as well?Thank you.

Hi All, We are trying to deploy IDSM2, which is acting in promiscous mode at this moment to act as inline ..We are understanding that, there are couple of methods by which we can deploy that,one by making interface pair config and other in vlan pair...

I am setting up 2 redundant 5520's in failover mode to replace a Checkpoint FW. The new ASA's have 4 Gig and 1 fast ehternet interfaces to use. I need to establish 2 DMZ's, 2 outside connections, and obviously 1 inside interface. Since one interfa...

I have to create a Poison Pill where CSA can essentially disable a system to the point that it is unusable and not recoverable. I know there are several rules that can possibly do this by themselves, but I was wondering what would be the most effecti...

I am using SDM for the first time to set up a 871 router. There is a predfined policy that just seems counter intuitive. It is found in the Firewall and ACL section and is called sdm-permit. It is applied from the out-zone to self. This is the con...

I want to backup ASA configuration automatically, for example, once a day.I guess, I should use something like passwordless ssh to my ASA and run something like "save config and scp it to remote linux serer".Is there some article/howto that can help ...

Our ISP gave us a range of real internet ip address (10.1.1.1 to 10.1.1.15 for example). We have domain names registered to some of the ip addresses (ie www.webserver1.com -> 10.1.1.1, www.webserver2.com -> 10.1.1.2, etc).My outside interface on the...

What would need to be changed for this to be dynamic?access-list 100 extended permit ip 172.25.2.0 255.255.255.0 10.100.2.0 255.255.255.0access-list nonat extended permit ip 172.25.2.0 255.255.255.0 10.100.2.0 255.255.255.0nat (inside) 0 access-list ...

Pix 535 with 1GB RAM and running version 8.0(3). I would like to do this:static (i,o) 1.x.x.1 10.x.x.1 netmask 255.255.255.255static (i,o) 1.1.1.2 10.x.x.2 netmask 255.255.255.255....static (i,o) 1.x.x.x 10.x.x.x netmask 255.255.255.255How many stat...

Hi,I've a IPS 4255 with the version 6.0(3) and when t try to acess the IPS through HTTPS - IDM appers this error in Java Console(1.6.0_05-b13):"Invoking SGZ Loader...java.net.SocketException:Unexpected end of file from server"and i can't connect to m...