Network Security

I'm reviewing solutions for WIDS event monitoring & mgmt, geared around our deployment of over 2000 mini-WLSE units and 2 campus deployments of the WLC platform.I'm looking for an appropriate solution to receive WIDS traps/events from those sources, ...

I am currently running a Demo of the Cisco ASA 5540. My current problem is this:I am trying to allow access to our Citrix web interface via clientless SSL VPN. I publish an internal link to our Citrix server(s) on the Portal page and the link connect...

We are unable to deny ASA admin functions to users who have connected via VPN. In summary, any user that makes a remote VPN connection to our ASA is able to start up ASDM and/or the https java applet regardless of the privileges set. This, in our o...

How do I open port 3389?This is what I typed in, but it didn't work. static (inside,outside) tcp x.x.x.x 3389 192.168.3.2 3389 netmask 55.255.255.255 access-list outside_in permit tcp host any host x.x.x.x eq 3389”I don't know what to use for the ...

Hello,I have just recently installed Cisco Security Manager 3.1. I have discovered my firewalls. However, in the map view, the CSM does not detect the VPN (site to site) already setup in the firewall config. Also, when deploying a simple access rule,...

How do you tcp permit any when it returns an error "invalid ip address any"?

HiI have production server which as CSA5.0 installed, I get this error message flagged on CSA. It is managed via MC 5.0.attempted to accept a connection as a server on TCP port 445 from 10.9.2.3. The operation was denied.Is there way to set this rule...

I have configured the FWSM for Active Active failover. 2 VLANS (VLAN 7 and VLAN8) have been created for failover and state information to be replicated to other unit.Issue: Replication does not happen. Secondary switch drops VLAN packets (see output ...

I have a 877 IOS Router running 12.4 and a PIX 501 running 6.3(5).I have configured a tunnel between the two firewalls and all protocols and ports seem to work okay apart from ICMP through the tunnel.The config is designed so that the 877 router tunn...

Hi,If I do a snmpwalk on our IDSM-2 blade, I can read the SNMP write string, this seems a bit insecure to me.Is this normal behavior?Kind regards,Michael

Hi ,Anybody clarify is NetFlow Service Card necessary for cisco 4507R swich ,running cat4500-entservices-mz.122-37.SG.bin .Or through any image changes I will be able to enable ip route-cache flow

Hi,I have two Cisco PIX 501's (PIX1 and PIX2) providing a LAN to LAN IPSec VPN between two sites (SITE1 and SITE2). PIX1 is at SITE1 and PIX2 is at SITE2.If I ping a device on the LAN at SITE1 from a device on the LAN at SITE2, the VPN tunnel comes ...