Network Security

6 Feb 08 2008 09:43:28 106015 192.168.140.9 192.168.1.20 Deny TCP (no connection) from 192.168.140.9/4830 to 192.168.1.20/80 flags RST on interface insideI've seen a couple other posts with almost my exact issue, however, they weren't resolved. Also,...

am trying to get a DMZ configured . I have allowed the interesting traffic to go from the Inside inteface to the DMZ and vice versa but its still being dropped. When I do a packet trace it tells me the Implicit deny ACL rule is the cause of my proble...

Does anyone provide URL Filtering for Guest Access with the Cisco NAC Appliance?We are looking to offer Guest Wireless Access, but URL filtering may be a requirement. I'm not aware that the NAC Appliance supports this natively, and we can't rely on u...

Hello,I have downloaded:1.IPS-SSM-K9-sys-1.1-a-6.0-3-E1.img2.IPS-K9-6.0-3-E1.pkgBut managed to install only second one.For fist one it said that it was a wrong image.Has anybody know why?

Hi,I have configured the IPS in offline mode. Now in my event viewer I m getting too much log H,L,M, I want to get few logs and also wana block the IP that generate Alarm. I have define the action on signature but still alarm are coming. Kindly tell ...

Hello Netpros,Greetings!!!One of my new assignments involve integrating PIX 515 & VPN concentrators in to a single ASA 5540. I researched the cisco site & docs for any limitations of ASA in terms of number of site-to-site VPN's, usergroups, user acco...

folksi have a data centre which needs a firewall in front of it and i'm being told to use a fwsm since there is a 6500 in placemy problem is i don't manage the switch and i prefer the idea of physical separationi also have no experience of dealing wi...

We are behind a PIX 506E firewall and am wondering what change needs to be made so that we can access our external IP address while we are internal. Both sites are operational when typing in the internal ip address (when internal) and the external ip...

Do you have your IPS signatures automatically update? I'm considering not allowing the automatic updates to come in and doing it manually once a month if it's that frequent.

Hi, One of my costumers has the urgent need to block one p2p application named ares. I searched in the p2p signature database and i found signatures for kazza, gnutella, imesh,etc , but didnt find any reference to this application. Any ideas how can ...

Hi, I have an ASA 5520, but I'm unable to block torrents without to block ports.Is there any solution to prevent torrents with AIP-SSM ?thanks

I have URL logging enabled on my ASA-5505, with a default HTTP fixup policy. URL log messages go to my syslog in this format:2008-01-31T16:49:52-0600 <local4.notice> x.x.x.x %ASA-5-304001: y.y.y.y Accessed URL z.z.z.z:/index.htmlThis is exactly what ...