Network Security

If a default action on a specific signature is configured to "produce alert" only, why is it that the IPS will also Log packet from the attacker? I would have thought that this would have required that the action "Log attacker packets" be selected as...

I am setting up a VPN tunnel between two sites and I must be able to pull DHCP addresses across the tunnel to my client devices. At the remote end I have a DSL router in bridged mode connected to a ASA firewall. My client devices are connected to a 3...

I have to do password recovery for IDSM-2. I have read the document available for password recovery. It shows that i have to re-image the IOS because i am unable to log into IDSM-2. Will Re-image will disturb the normal communication of the switch an...

Running 6.0.5 E2Sig release S342 contains a new signature (6964 - Asprox injection attempt). I want to tune the signature but can't find it in the signature definitions (sig configuration) section. In addition, I can't find this signature in Cisco's ...

Hi, I just wanted to know if the 4240 IPS can be configured to monitor(inline) an etherchannel port? If yes, where can i get a guide?Thanks in advance!

Hi,I have an ASA that is using ACS as the radius authentication server.My problem is with VPN remote access.When i configure group-policy external and use this policy as the default policy for the tunnel-group (i download the VPN attributes from the ...

Hi Netpros,I have PIX Firewall 515 Version 6.3(5)I have to use the 'clear local-host' command quite often on daily basis in order for the users to connect once again. What could be the reason behind this? Any help greatly appreciated. RegardsFaiz

Hello all,My PIX 515-E (7.2) blocks IP addresses assigned to Remote VPN users. It seems that blocked IP address are chosen randomly and they are accumulating overtime. I didn't pay attention to it until number of blocked IP addresses become significa...

ciscoasa# sh verCisco Adaptive Security Appliance Software Version 8.0(2)Device Manager Version 6.0(2)Compiled on Fri 15-Jun-07 19:29 by buildersSystem image file is "disk0:/asa802-k8.bin"Config file at boot was "startup-config"^^^^^^^^^^^^^^^^^^^^I ...

hi,anybody. On the CISCO 6513,the FWSM module don't delete the access-lists (config)# no access-list no the parameter of the access-list numberhow can i delete the access-lists on the FWSM module?

Friends, i have ASA 5520 and opened SMTP and POP3 ports. I want to be sure that i did everything ok. Outside Interface IP is 1.2.3.4 and 10.0.0.10 is mail server Microsoft exchange.I created ACL: 1) access-list Outside_access_in extended permit tcp a...

After adding new firewall rules on a Cisco 1801 and hitting 'Apply settings', the progress window will scroll for a short period before a dialog is displayed that reads:"Connection lost.SDM lost the connection to your router because of a communicatio...

Hi, I have setup ASA 5505 and on other site we are using songate FW and I have setup Tunnel between both devices and when I run this command sh isakmp then it shows the Tunnel status is active but when I try to ping any divice or try to open any serv...

Hello,After changing the default port 443 to e.g. 442 for the WebVPN access I see the following behaviour:- clientless access mode is working as befor- full tunnel client access mode gives the following error message:"The SSL VPN to the remote peer w...