Network Security

am trying to get a DMZ configured . I have allowed the interesting traffic to go from the Inside inteface to the DMZ and vice versa but its still being dropped. When I do a packet trace it tells me the Implicit deny ACL rule is the cause of my probl...

Does anyone provide URL Filtering for Guest Access with the Cisco NAC Appliance?We are looking to offer Guest Wireless Access, but URL filtering may be a requirement. I'm not aware that the NAC Appliance supports this natively, and we can't rely on u...

Hello,I have downloaded:1.IPS-SSM-K9-sys-1.1-a-6.0-3-E1.img2.IPS-K9-6.0-3-E1.pkgBut managed to install only second one.For fist one it said that it was a wrong image.Has anybody know why?

Hi,I have configured the IPS in offline mode. Now in my event viewer I m getting too much log H,L,M, I want to get few logs and also wana block the IP that generate Alarm. I have define the action on signature but still alarm are coming. Kindly tell ...

Hello Netpros,Greetings!!!One of my new assignments involve integrating PIX 515 & VPN concentrators in to a single ASA 5540. I researched the cisco site & docs for any limitations of ASA in terms of number of site-to-site VPN's, usergroups, user acco...

folksi have a data centre which needs a firewall in front of it and i'm being told to use a fwsm since there is a 6500 in placemy problem is i don't manage the switch and i prefer the idea of physical separationi also have no experience of dealing wi...

We are behind a PIX 506E firewall and am wondering what change needs to be made so that we can access our external IP address while we are internal. Both sites are operational when typing in the internal ip address (when internal) and the external ip...

Do you have your IPS signatures automatically update? I'm considering not allowing the automatic updates to come in and doing it manually once a month if it's that frequent.

Hi, One of my costumers has the urgent need to block one p2p application named ares. I searched in the p2p signature database and i found signatures for kazza, gnutella, imesh,etc , but didnt find any reference to this application. Any ideas how c...

Hi, I have an ASA 5520, but I'm unable to block torrents without to block ports.Is there any solution to prevent torrents with AIP-SSM ?thanks

I have URL logging enabled on my ASA-5505, with a default HTTP fixup policy. URL log messages go to my syslog in this format:2008-01-31T16:49:52-0600 <local4.notice> x.x.x.x %ASA-5-304001: y.y.y.y Accessed URL z.z.z.z:/index.htmlThis is exactly what...

We're having some problems getting our VPN service fully functional. We've managed to create a easy vpn server through the SDM interface and that part is fully functional.We can connect from the outside to the router and we are getting the correct Ip...

Hi All,we recently upgraded from 6.3 to 7.2.2 and had an issue with the size of the file.The file itself was 184k and contained approximately 4000 lines. The release notes specify the file can be 1mb. Does anyone know how the system calculates the si...