Network Security

Test bed configuration consists of Catalyst 6500 and 4255 IDS vith SW version 6.0. The traffic is captured using VLAN capture feature and send to the sensing interface Gi0/0 on IDS. The reset interface is Gi0/3, connected back to the Cat6K. Vlan 140 ...

When I configure subinterfaces on an ASA, how does the security level of the physical interface interact with the security levels of the subinterfaces? Can I make the subinterfaces security levels different from the security level of the physical int...

I am having a URL http://203.199.83.190/newsletter/index.php on the pix inside network i want this URL to be allowed from outside for some x ip address how can i achieve the sameRegardsHitesh

Is this is true that cisco mars can do the reporting for all the devices(like checkpoint, juniper, sonicwall, and IBM-ISS ) devices. Requesting plz reply ASAP

Not sure if this is the right forum...I have two identical ASA 5520's that were purchased at the same time. I use them in an active/passive failover. This week I noticed that the displayed flash size on the active one was 64 MB and the flash size on ...

Hi,docs say that PIX/ASA sends a ping to discover destination MAC address. I can not find a reason for doing that... anyone can help ?

Hi all,Our firewall has the default timeout for idle connections and is set at 1 hour.i know i can change this, but my question is this :Is there a way that i can configure the firewall, to have different idle timeouts for for different groups based ...

I cant find this command under the system execution space or even in each contexts.

Hi, i want to apply websense to my ASA. But i want the free one, is there any?I want to use free online published url - ip resolver like http://centralops.net/co/. But i don't know if it can be used in ASA as Websense.Can anybody help me ? ^.^Thanx b...

Hi,I have read on a previous thread about QoS on the firewall an read the link provided.I have one question regarding QoS on firewallI have read that the QoS supports Priority traffic and Policed (rate limiting) traffic.For example:i have a 256K FR.I...

I am looking for the most efficient way to configure NAT exempt statements for a multiple interface ASA. I know I will need to write ACL's but do I write based on source and destination networks? Or source network to Any? Any suggestions would be gre...

I have a PIX-515E, Software Version 7.2(1) with NAT disabled, in router mode, and almost all inspection off. REcently i noticed that PIX randomizing TCP sequence in ICMP Frag embedded message, that is last 4 bytes of the packet. Looks like windows ho...

Hi, I've a question regarding the email topic: How's the behavior of ASA/PIX ACL vs Router ACL? Let's say for Router: R1 (s0/0) --- (s0/0) R2 --- CS-ACS - R1 has an inbound ACL on interface s0/0- R1 and R2 running OSPF- Therefore, we need a "access-l...

I have an interesting PIX issue. A client is trying to route outside traffic to a gateway in a different subnet. I have never seen this configuration before. According to the ISP, I need to run the following config.:ip address outside 206.138.x.x 255...

For the longest time I was able to connect to a PIX 506e using SSH Secure Shell, but now I can not. It gives this error message "Connection closed by remote host" We haven't made any changes to it. It just stopped working. Do you have any suggestions...