Network Security

I have a unique requirement for my ASA PAT configuration...By default a Cisco router running IOS will utilize the SAME port when creating a dynamic PAT. i.e. the inside hosts request, generates a dynamic PAT, where the requests source port, is the po...

Hi,I have an ASA 5505 ver 8.2 with inside network 192.168.20.0/24 and 192.168.20.254 configured on inside interface.Also I have an outside interface 10.10.10.1/24 with default gateway 10.10.10.254 assigned on ethernet of router.On configuration I hav...

I have a unique problem. I lock myself out of the pix on any interface via ssh,telnet etc . I'm trying to connect directly but logging console is enable and the amount of logs makes it impossible to do anything. any ideas on how to stop it other than...

If a default action on a specific signature is configured to "produce alert" only, why is it that the IPS will also Log packet from the attacker? I would have thought that this would have required that the action "Log attacker packets" be selected as...

I am setting up a VPN tunnel between two sites and I must be able to pull DHCP addresses across the tunnel to my client devices. At the remote end I have a DSL router in bridged mode connected to a ASA firewall. My client devices are connected to a 3...

I have to do password recovery for IDSM-2. I have read the document available for password recovery. It shows that i have to re-image the IOS because i am unable to log into IDSM-2. Will Re-image will disturb the normal communication of the switch an...

Running 6.0.5 E2Sig release S342 contains a new signature (6964 - Asprox injection attempt). I want to tune the signature but can't find it in the signature definitions (sig configuration) section. In addition, I can't find this signature in Cisco's ...

Hi, I just wanted to know if the 4240 IPS can be configured to monitor(inline) an etherchannel port? If yes, where can i get a guide?Thanks in advance!

Hi,I have an ASA that is using ACS as the radius authentication server.My problem is with VPN remote access.When i configure group-policy external and use this policy as the default policy for the tunnel-group (i download the VPN attributes from the ...

Hi Netpros,I have PIX Firewall 515 Version 6.3(5)I have to use the 'clear local-host' command quite often on daily basis in order for the users to connect once again. What could be the reason behind this? Any help greatly appreciated. RegardsFaiz

Hello all,My PIX 515-E (7.2) blocks IP addresses assigned to Remote VPN users. It seems that blocked IP address are chosen randomly and they are accumulating overtime. I didn't pay attention to it until number of blocked IP addresses become significa...

ciscoasa# sh verCisco Adaptive Security Appliance Software Version 8.0(2)Device Manager Version 6.0(2)Compiled on Fri 15-Jun-07 19:29 by buildersSystem image file is "disk0:/asa802-k8.bin"Config file at boot was "startup-config"^^^^^^^^^^^^^^^^^^^^I ...

hi,anybody. On the CISCO 6513,the FWSM module don't delete the access-lists (config)# no access-list no the parameter of the access-list numberhow can i delete the access-lists on the FWSM module?

Friends, i have ASA 5520 and opened SMTP and POP3 ports. I want to be sure that i did everything ok. Outside Interface IP is 1.2.3.4 and 10.0.0.10 is mail server Microsoft exchange.I created ACL: 1) access-list Outside_access_in extended permit tcp a...