Network Security

Some signatures from our IPS are tuned to send a TCP Reset when triggered. When this happens, the PIX denies each and every one of the 200 TCP Reset packets (per instance) from the IPS device (reference error %PIX-6-106015 in syslog). Apparently, t...

The management interface of IPS 4240 is disabled by default can anyone tell me how to enable this interface.I hv just done the basic setup and not able to access the IPS through Web browser

Has anyone had any success using the monitor resource usage function for Cisco MARS? How long does it take to baseline or does it baseline?Message recievedDevice Resource Usage Anomaly: current inbound packet error rate is 90.9 percent for Device dev...

I have a two asa with asdm version 5.2(3) , but in tools is not available The packet tracert, the firewall is working in mode transparent. Any ideas?

how i can open yahoo voice port in ASA

global (outside) 2 interfacenat (inside) 0 access-list exemptnat (inside) 0 Xfuadc1 255.255.255.255nat (inside) 0 Xfuadc2 255.255.255.255nat (inside) 2 192.168.5.0 255.255.255.0nat (inside) 2 X.X.X.0 255.255.255.0nat (inside) 2 X.X.X.0 255.255.255.0n...

I have an existing PIX 515 failover pair. I am installing a second circuit (more bandwidth needed) and will be using a second PIX 515 failover pair. Both outside interface IPs will be in different networks eventually. Both inside interfaces will b...

I'm pretty new to managing IPS. My co is looking at deploying a large number of this and i'm suppose to manage it. i got a few questions 1. are the available signature in default IOS IPS enough? i fired rentina to an old redhat version OS but i fin...

when I telent the ASA it reset the connection after one minute

Hi,I am getting the following error despite having the configs right. Can someone help ?I have a Domain controller in DMZ trying to talk to the Inside Domain controller.The error is - "No translation group found" Source is from one of the Inside Doma...

Has anyone had issues with S297 / 5.1.6E1 blocking VPN IP's out? Out of the blue my users will checking Email via the VPN and the the IPS will deny the IP address, and lock them out. I have been watching my IPS Event Viewer but am at a lose. I ideas ...

Good day again! I need help on these issues below.I have this issue with the CSC that I have configured with the default global inspection settings. I cannot use my Outlook and I would end up having this log in the CSC:2007/08/16 15:37:21|Web|user de...

We have a very busy vlan that we're capturing traffic from and sending it to a Gig port connected to an IDS device. Approximately 20% of the traffic is either being dropped by the switch capture port or the IDS device. We've been told 3% dropped traf...

My ASA 5520 has been working well for the past 6 months. Most of the clients connections are IPSec/NAT-T. Today one of my clients connected for the first time and they just connected IPSec. The IPSec client could not pass traffic across the VPN. ...