Network Security

hi all can someone just advise which is a better solution the nac appliance or the nac framework. regardssushil

HiI created site-to-site vpn between asa and pix with no sysopt connecion permit-vpn.I used interface access-list to control what remote site(PIX) can access to main site(ASA).IPSec connection is up and everything is working fine.I have question rela...

I have an ASA 5520 with an SSM-10 module.ASA is running 7.2(2)10 and ASDM 5.2(2)The IPS is running 6.0(5)E2I want to upgrade the IPS engine to 6.1(1)E2Is ASDM 5.2(2) compatible with this?Thx,Greg

I have a PIX525 running 8.0(3) with 256MB RAM & running Restricted License.When i use OUTSIDE Interface NAT the NATing works fine.But when i user any other Global IP for NATing it's not working.Pl. help.

I have a unique requirement for my ASA PAT configuration...By default a Cisco router running IOS will utilize the SAME port when creating a dynamic PAT. i.e. the inside hosts request, generates a dynamic PAT, where the requests source port, is the po...

Hi,I have an ASA 5505 ver 8.2 with inside network 192.168.20.0/24 and 192.168.20.254 configured on inside interface.Also I have an outside interface 10.10.10.1/24 with default gateway 10.10.10.254 assigned on ethernet of router.On configuration I hav...

I have a unique problem. I lock myself out of the pix on any interface via ssh,telnet etc . I'm trying to connect directly but logging console is enable and the amount of logs makes it impossible to do anything. any ideas on how to stop it other than...

If a default action on a specific signature is configured to "produce alert" only, why is it that the IPS will also Log packet from the attacker? I would have thought that this would have required that the action "Log attacker packets" be selected a...

I am setting up a VPN tunnel between two sites and I must be able to pull DHCP addresses across the tunnel to my client devices. At the remote end I have a DSL router in bridged mode connected to a ASA firewall. My client devices are connected to a 3...

I have to do password recovery for IDSM-2. I have read the document available for password recovery. It shows that i have to re-image the IOS because i am unable to log into IDSM-2. Will Re-image will disturb the normal communication of the switch an...

Running 6.0.5 E2Sig release S342 contains a new signature (6964 - Asprox injection attempt). I want to tune the signature but can't find it in the signature definitions (sig configuration) section. In addition, I can't find this signature in Cisco'...

Hi, I just wanted to know if the 4240 IPS can be configured to monitor(inline) an etherchannel port? If yes, where can i get a guide?Thanks in advance!

Hi,I have an ASA that is using ACS as the radius authentication server.My problem is with VPN remote access.When i configure group-policy external and use this policy as the default policy for the tunnel-group (i download the VPN attributes from the ...

Hi Netpros,I have PIX Firewall 515 Version 6.3(5)I have to use the 'clear local-host' command quite often on daily basis in order for the users to connect once again. What could be the reason behind this? Any help greatly appreciated. RegardsFaiz