Network Security

Hi to all,Please, excuse my english I work with cisco pix 515E.I have a reverse proxy server to integrate to my network.I placed it in a public dmz, and have placed my webserver in private dmz.I used static command (public dmz -> private dmz)I used n...

Is CSM a good tool to use to gather syslog information from various firewalls. MARS or something like that isn't in the budget yet so i'm looking for an interim solution.Thanks,Darren

hi everyone,can I somehow put a cap on one of the ports of the device in question, in order to limit the avaible bandwith to 2Mbps on that particular port? thanks in advance, all help is greatly appreciated!Peter

Can Cisco IPS Manager Express (IME) and Cisco Security Manager 3.2 be installed on the same machine? When I tried it complained that IEV assists and that it was unable too.

On MARS alerts (from IPS 4260) are received on one of the IE vulnerabilities.Event- Microsoft Internet Explorer Dynamic HTML Element Processing Memory Corruption Vulnerability Source ip/port-a.b.c.d/0Destination ip/port-w.x.y.z/0Protocol-TCP[w.x.y.z ...

Hi AllI have an issue in updating Cisco IPS (Platform ASA -SSM 10) Signatures . We have a valid license for the same . The issue is that for the Cisco IPS version 5.0(2)S152.0 , i am unable to update it to latest signatures S252.Kindly help me in thi...

I try to configure ASA5505 base license. I created 3 interface vlans; inside, outside, dmz by following this sample:http://www.cisco.com/en/US/docs/security/asa/asa72/configuration/guide/examples.html#wp1034897But I cannot ping from inside to dmz.Err...

Hi, I want to ask about ASA 5510. I have 2 link to internet (int eth0 and int eth1). I want to make rule like PBR in router. For example, I want 192.168.1.0/24 (inside) for internet go to eth0 and 192.168.2.0/24 (inside) for internet go to eth1. Can ...

Hi,I have PIX515E configured and working fine.It has the Site-Site IPSec (Main site A to Site B and Site A to Site C)configuration and it is working fine also.Now the customer want another Site - Site IPSec between site A to site D.When I create this...

PIX 515E 7.0 (4)Following http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a00808c38a6.shtmlAll commands excepted without problems however, yahoo/google are blocked - i can get onto cisco.com. Any ideas?Here is the config...

Hi,I am new in security. I have ASA 5510 with SSM-10 module in my lab. I want to do some labs for basic concepts and configurations. Can anyone send me small lab on ASA 5510 with SSM-10. (OS ver: 2.4.26-IDS-smp-bigphys). [email protected]...

In my current config, I have:ip ssh source-interface Ethernet0Is it possible to configure ssh on both interfaces? The above command forces one to specify either ehternet0 or ehternet1, not both. Thus, with my current config, I can ssh to the soho92 f...

Has anyone seen addresses like this in Pix?0152.4153.2000.1617.8117.d000.0001.0000.00they keep showing up in output of "show dhcpd binding" and block other legitimate client machine.

We currently have a site with ASA5510's in active/standby. There are only two interfaces today. Inside and outside. Both interfaces are advertised to the internal network via seperate OSPF instances. We are adding a DMZ. My quesiton is;Is it acceptab...