Network Security

Hi.I am going to have an OSPF process for two internal interfaces. But I also have one external interface where I do not want any OSPF traffic going out. I have not so far found any OSPF PASSIVE INTERFACE type of commands om PIX/ASA. Is there any one...

I have 12 rules pending and when I click on generate, it gives an error after a whileRules for <SERVER> have complexity 7706 which exceeded 7200. Any idea how to increase it and also, I have copied the url for agent kits to the servers and it install...

Other than WebSense, what options are out there? Is N2H2 the same as SecureComputing SmartFilter? SmartFilter says that it supports PIX via IFP but the web site isn't clear on what IFP is.Thanks,Diego

Why is the being shown on eth0/0 and eth0/1 ?Traffic Statistics for "inside": 12012747 packets input, 1762314015 bytes 15294460 packets output, 15323589877 bytes 317420 packets dropped 1 minute input rate 2 pkts/sec, 196 by...

I have a very basic question, but at the same time i need an answer a.s.a.p please!, so if someone can guide me on this i would be grateful. I have a scenario where i have a main campus that i would like to connect to few branch offices using site-to...

hello all,i've created new customer signature to reset for tcp string with testattack.for testing, i've configured telnet password using testattack on router's line vty.i've tried to connect to the router with testattack password.i can see the popup ...

Hi,I wanted to know the upgrade procedure for ASA from 7.0.3 to 7.2.4Whatever the pre-existing licensing keys are applicable to new version or new keys required.Regardsskrao

Hi there,Our PCI auditor has said that ACL's and vlaning between test/office/production (cardholder) etc networks are not sufficient, and that we will need firewalls. However at a PCI conference we were advised that ACL's and vlaning were sufficient....

I've inherited the IT duties at my office, but don't have a whole lot of experience in this area. Currently our network is setup such that our webserver catches all incoming SMTP traffic and relays it to the exchange server. Additionally the exchange...

Hi guys, what do you guys think is SSG better ? or sidewinder ?? what you guys think about it, i know its a cisco forum but still thought i should ask you guysthanks

Pix firmware 7.2.1, trying to run ftp on a nonstandard port(8021), appears that the inspection engine is causing issues. I have delted my default inspection policy, created a new one for ftp on port 8021, i can connect but never get the data channels...

I would like to allow an inside IP that is not in the permit acl's to access the following website IP addressesxxx.xxx.xx.170xxx.xxx.xx.150Another engineer added the two access list at the end but I don't think they are much help. If anyone can assis...

I've found a lot of good detailed information on configuration of Cisco NAC appliances, and the general functions. But not a good, high-level walk through the steps the appliances/solution handle an OOB deployment for handling new connections to a LA...

Hi Hi to all,I am trying to create GRE tunnels over IPSec using ASA 5510. Before our company purchased the appliance, we were told that 5510 does supports GRE and configurations can be done to it to create the tunnel. I had been searching around the ...