Network Security

I have a PIX 515E with restricted license. Current, I have about 5 users connecting PIX using Cisco VPN clients for Windows XP.Recently, I plan to connect two branch offices to this PIX using site-to-site VPN. Each uses Cisco 877 ADSL router.Here is ...

I have my SSM20 operating in a passive no-intrusive monitoring mode now. I am concerned that when I turn on the IPS functionality that a lot of false negatives will cause my users problems. Is this a valid concern or shouldn't I worry about this?

I have 4260 IPS. I have heard that 5.x is not supported IEV. Only IDS with 4.x support IEV. Now 5.x require CSM for event viewing. I got the 2 CSM CDs in the 4260 box. I also have cisco works cds.Can u please guide me will these are enough to install...

Just wanting to check my work for setting up a site-to-site but only want to give access to a specific host. Is correct?# Access list to specific host.acces-list inside_outbout_nat0 permit ip 10.0.0.9 255.255.255.255 10.254.0.0 255.255.255.0# remote...

I am getting the following error on my ASA5510;7103042 Ike Initiator unable to find policy: Inft outside, Src: 172.16.2.14, Dst: 172.16.3.1007103042 Ike Initiator unable to find policy: Inft outside, Src: 172.16.2.15, Ds...

Hi all, Lets look my configuration:static(inside,outside) tcp 23.56.67.78 www 192.168.1.2 www netmask 255.255.255.255static (inside,outside) tcp 23.56.67.78 smtp 192.168.1.3 smtp netmask 255.255.255.255access-list out_in permit tcp any host 23.56.67....

HelloWe have a ASA 5540 + IPS installed here. Unfortunately the guy that installed left without leaving any documentation so I'm a bit lost with this.We have a 100Mbps FD link to the Internet. The inbound traffic (from the Internet) shows no limit (I...

Hello all,Cisco Newbie here. We have just put a gateway between our PIX 515e and our email server. This gateway needs port 4 open to receive its updates from the manufacturer.Could someone please advise the securist way to do this?Thanks in advanceSt...

I have a pix 506E and I get ~ 20 /sec of the these messages. The message is Deny tcp src outside:xxx.xxx.xxx.xxx/29977 dst inside:yyy.yyy.yyy.yyy/25 by access-group "OUTSIDE_ACCESS_IN" Where yyy.yyy.yyy.yyy is my webserver. I realize that this means...

I am trying to bring up a tunnel between my older 2811 and my new ISR 2811. The tunnel shows QM_IDLE with a sho cry isa sa on both devices but I can't ping across the /30 that I assigned to the tunnel interface and sho ip eigrp neigh doesn't show th...

I have two PIX firewalls configured with two OSPF processes.The edge router is connected to the PIX outside interfaces in one process.I want to make sure the edge router will alwas prefer one PIX over the other, but the one I want preferred has a low...

Hy.I had an problem yesterday when i try to upgrade my fwsm from version 2.3 to 3.2.In version 2.3 i was able to connect to an dmz address directly and to it's inside nat address.But after the upgrade it was not possible anymore to connect to the dmz...

Wanted some opinions3|Jan 12 2008 07:48:14|313001: Denied ICMP type=3, code=13 from 12.126.158.81 on interface outside6|Jan 12 2008 07:48:19|113015: AAA user authentication Rejected : reason = Invalid password : local database : user = root6|Jan 12 2...

I would like to know if if is possible to set up static translations to NAT both the SRC and DST addresses of a packet. I would be using an ASA