Network Security

Dear friendsJust a query about operating IPS 4255 in inline mode. Currently, it is operating in promiscious mode. Now, i am planning to change to inline mode for just one segment (Internet vlan - 15) connecting the 4507 core switch 4507 and the 515 f...

I'm experiencing what I believe to be a false positive on the BO2K-UDP (4055) signature. As near as I can tell, it is getting triggered by Xbox consoles when they connect to the Xbox Live! service. I am currently running the S307 sig update. What is ...

Hello, I am trying to figure out what the difference is between K8 and K9? Cheers!

When going thru the ASDM VPN wizard and defining source and dest hosts for access, it creates a generic ACL name like 'outisde_2_....'. I want to be able to name the ACL something that makes sense. How do I do that easily without having to make cha...

I followed the instructions on document ID 8529 to reset the password on my Pix 501 and after the uploading via tftp the file to the PIX 501 it just hangs and does nothing. Any ideas?

I have a cisco router running IOS 12.3,c2600-ik9o3s3-mz.123-12.bin. I've enabledssh on the device so that other administrators can ssh into the device foradministration purposes. I want to disable the DES feature from the device. In other words, c...

Dear friends, Need an immediate help. How to get a partciular product updates in IOS, Firmware, Patch release?

Hi We run PIX525 ver 7.01 and get following error when traffic from inside to dmz:2007-04-17 20:31:56 UTC Local0.Info 192.168.252.1 Apr 17 2007 04:08:23 : %PIX-6-106015: Deny TCP (no connection) from 192.168.1.x/443 to 192.168.0...

I got a Tivo for Christmas and I'm trying to open the appropriate ports on my PIX 501 to allow it to communicate with the Tivo service. The Tivo knowlege base says I need to open these ports for inbound and outboud access: - TCP 37,2190,4430, 7287-...

i am using and asa5520 with ios 7.2(3). I have assigned all interfaces into security level 0. I have configured access lists to permit traffic through the interfaces but all traffic is denied. when i allow traffic between interfaces with the same sec...

Hello, I am using an ASA 5540 VPN edition to terminate VPN connections from software clients and PIX/ASA boxes using EasyVPN (in network extension mode). I am trying to get the PIX/ASA remote networks and the VPN Clients to talk to each other (they ...

Objective: Provide site-2-site VPN, remote access VPN and protect servers farm.Which is a better design? I feel muchmore comfortable having the VPN concentrator being protected by the firewall; however, at the same time,both encrypted and decrypted...

I want to buy a AIP-ssm IPS for ASA 5510. Can I block msn ? Can I say this IP can use MSN but these are not ? is that possible ? I know that there is no user based configuration on IPS but is there a way to do that with IP ?

Hello Dear guysI have a cisco nac solution (OOB)i want to user role base vlan taggingbut when i want to integrate active-directory users to NAC ,, it push all of them in one role.I cant not connect to OU of Active to seprate users :(any idea please?