Network Security

Hello,can anyone share how you deal in IDS/IPS with applications that are based on Akamai content delivery services?There is a concern that if “Akamized” web-server is targeted in web-based attack - it will be recognized as initiated from one of ...

Hi,I'm configuring DHCP server on one of my VLANs on ASA but it accept me just 128 addresses can anyone describe please why? why doesn't it accept more than 128 address?Thanks in advance

I get the same results pinging in eiter direction through the VPN tunnel (tunnel is working fine) below is a trace and included is the config.HO1ASA02# packet-trace input inside icmp 10.1.6.121 3 1 10.60.50.1 Phase: 1Type: FLOW-LOOKUPSubtype:Result: ...

Hello All,I just installed my ASA 5505 and the firewall log showed that it denied a connection from Ip address 74.9.151.50 every second. Please see the attached file. What does the log message indicate and how to stopip address 74.9.151.50 from att...

Hi,I'm not sure if this would be more suited in the R&S forums but I figure some security people must have worked on something similar....I have an ASA sitting behind a 2800 router with 2 Internet circuits. I'm trying to NAT everthing from the ASA in...

Hi,We have this module ASA-SSM-20 installed on our ASA 5520 appliance. I am able to login in ASA device but when i am doing session 1. It is asking login : after giving username and password it is not accepting the username. This module is installed...

Hi there, I apologize if this is a repeat. But, the network I have is situated this way: No DMZ (yet), No NAT'ng, 1 Class C subnet, class C IPs assigned to devices, ASA 5505 in transparent mode, and a Cisco VPN Concentrator 3005. (This is going to ...

Hi all,We create new VLANs & will assign these VLANs to the Firewall Services ModuleBy using the below command:-(Config)# Firewall vlan-group firewall_group vlan_rangeMy question is there any need to restart the FWSM after adding new vlan into vlan g...

Hi!I'm abit confused and need some config helpHow would you configure your PIX/ASA to let your DMZ which has a public IP-Network access to the internet without NAT'ing it through the outside interfaceAnd without giving the DMZ access anything else (l...

In a heterogeneous, non-Cisco environment (e.g. Dell switches, Sidewinder firewall), is it possible to obtain accurate topology/visualization information? If so, how is this accomplished? Any other best-practices/gotchas for getting the most out of...

Has anyone found a viable way of converting the very odd rule definitions of an ipfw on bsd to a usable format like acl's ? I am really breaking my brain with stuff like "skip" rules ? why would you wan't that and how can i convert that to a usable a...

Does the PIX 515 running v6.3(3) OS correctly support leap year (Feb 29)?

Hi,We monitor internal users http traffic using a product called Surfcontrol Web Filter - SCWF. This SCWF server sits on a VLAN (Cisco 3750) which also has the inside interface of the ASA and we mirror the traffic seen on the inside port to the SCWF...