Network Security

Can any guide me configure security for permiter cisco FWSM? Is there are best practice or standard configuration recommanded by cisco for perimeter firewall?

ISAKMP spi size buffer overflowInternet Security Association and Key Management Protocol (ISAKMP) is a key exchange protocol signature. ISAKMP is vulnerable to abuffer overflow. A remote attacker can send a specially-crafted ISAKMP payload to a vulne...

I have two routers outside the PIX .what is the best practise for the loadbalancing between the pix and the 2 routers. which method is better ospf/Rip/Static to use between the pix and the routers?

I have the strangest problem. I've been trying the last couple days to get thisl2l tunnel up. I think it's up now as I do a "show crypto isakmp" and I do seeit there but for the life of me I cannot ping any of the Inside LANs...10.242.5.0 <-------->P...

Hi,I want to connect my cisco ASA5505 directly to the routers of my provider. My provider has 2 separate router running HSRP in between. Can i connect port 1 of my asa to 1 provider router and port 2 to the other router, each configured as outside wi...

Hello:I upgraded my ASA5510 from 7.0 image and ASDM 5.0 to ASA 8.0(3)/ASDM 6.0(3). Before the upgrade I could use the ASDM to configure my device just fine.After the upgrade the ASDM is stuck in a read-only mode. I get "You are authorized to access o...

I know that wildcard certificates per say will not work in a NAC CAS however we can get Subject Alternate Names installed in our wildcard certificate. If I get the name of our CAS installed in our wildcard certificate as a SAN will it work?

Hi,Anybody give a link or example how to enable IPS feature on ASA? Is it enable by default? Thanks

I was wondering if there is a report or a way to use the MARS box to generate a report on a specific subnet or group of IPs, as I would like to monitor internet sites users are viewing. Is the MARS box capable of doing this, or is there any easier wa...

What approach should I take in adding a FWSM to MARS200 vrs 4.3.3 when the FWSM vrs 3.2.3 is in an Active-Standby pair? No problem adding the active module, but how do you add the standby unit? And do I need to do that anyway>

Good morning I have a problem, I need to define a wireless network to connect visitors to the internet and nothing else, set an subinterfaz with a security level of 0 and do not understand because it connects to my network interfaces that have a leve...

I do not know if anyone has tried to do this with QOS/rate limiting or not but here goes....I want to rate limit one set of private ips from my organization and let the other group of ips get to the internet without rate limiting. Unfortunately we us...

We have an interface on an ASA with an ANY ANY. This ASA is managed by our CSM Server. We need to build this particular security policy for this interface. We have utilities that can assist here (i.e. Mazu Sniffer) and we can also rely on application...

Hi,If the ASA does not has AIP SSM, does it have IPS feature? If have, how to enable. I remember the old PIX can enable some IPS feature which has a part of full signature. I noticed there have some "inspect skinny', what's that does???, Is the IPS f...

PIX 515 with 4 interfaceseth0 - outsideeth1 - insideeth2 - DMZeth3 - not in useWe have added a second outside IP block to our Internet service. We would like to keep our current IP block and configuration on the outside interface. Can I use eth 3 as ...