Network Security

Hey Folks,I've set up my outside vlan as so:interface Vlan2 nameif outside security-level 0 ip address dhcp setrouteI need to release the IP address that that interface got dynamicly from the ISP. Kinda like doing a "ipconfig /release" on a windows b...

How can we use NAC on thin clients.

Hello -I have a 2600 router that separates two networks and I need to setup an ACL to allow traffic from 192.168.1.0/24 to two IP Addresses, 10.13.3.10 and 10.3.10.2. The rest of the network should be accessible from the 192.168.1.x net.

Could anyone please help. I recently installed a PIX 5520 with AIP-SSM-10. I can manage the sensor just fine and am using "configuring Cisco IPS using CLI 6.0" as a reference. I recently downloaded new signatures as sig1 on my sensor. when I enable t...

My customer recently tried to upgrade their ASA5520 to ASA 8.03(12). When they did that, all FTP through the firewall ceased to function.Is there a fix or a workaround for this?

I am having some trouble getting this tested in the lab. Essentially I have two PIX 506e setup, one pretending to be the hub, and the other a spoke (outside interfaces on the same network) with a working tunnel between them. I could ping across them ...

I currently have a Cisco IPS 4240 employed inline in my Customers Network. It is inside of the border Router, and in front of the Outside Firewall which protects the DMZ.the IPS is already configured to block certain types of packets inline. I was re...

Hi,The IDS signature "SQL Query in HTTP Request" (5474:0) does not recognize all malicious SQL selects. Currently, the reg exp looks like [%]20|[=]|[+])[Ss][Ee][Ll][Ee][Cc][Tt]([%]20|[+])[^\r\n\x00-\x19\x7F-\xFF]+([%]20|[+])[Ff][Rr][Oo][Mm]([%]20|[+]...

my main network is 10.9.2.XXX i have sub networks ie. 10.2.x.x, 10.3.x.x, 10.4.x.x, and so on! if i log into the 10.9.2.x network i can go into any sub network. but if i connect my laptop to ANY sub network of course my ip gets that sub networks ip. ...

I figured it out but if you have a better solution, by all mean please do.The ISP will be changed also so the DNS record will have to change. I will configure the DMZ with the new IP range from the new ISP. Change the server IP address and the DNS re...

Hi Friends,I have installed cisco security manager 3.1.1 with SP3, RME 4.0.5, MCP 3.0, cisco common services 3.0.5 and AUS 3.1.1The existing PIX, ASA and ISR routers are added in RME and its working fine.The same devices are import from DCR and added...

Hello,how many group-policy can I configure on PIx 515E with release 7.x?Thanks in advanceB.

I "denied" IDs 1109/0, 1109/1, 1109/2, 1109/3, all Cisco IOS Interface DOS. The above was configured in the IDM>Configuration>Policies>Signature Definitions>sig0)>Active Signatures. Denying the above denied all Internet activity. How do I know which ...