Network Security

Hello all!So, I have C6500 equipped with a FWSM.Until few days ago I had on FWSM IOS 3.1.5 and on SUP720 12.2(33)SXH, and from the SUP I could do without problems "session slot 'fwsm_slot_number' processor 1".Now I upgraded the version on FWSM to 3....

What will happen in case when i have two ASAs in active/standby failover mode and on one of them ssl vpn licence for 50 user.Is the HA failover on ASA possible at all for ssl vpn? What will happen in this scenario if i put licence with 50 users on fi...

I have a PIX 515E with restricted license. Current, I have about 5 users connecting PIX using Cisco VPN clients for Windows XP.Recently, I plan to connect two branch offices to this PIX using site-to-site VPN. Each uses Cisco 877 ADSL router.Here is ...

I have my SSM20 operating in a passive no-intrusive monitoring mode now. I am concerned that when I turn on the IPS functionality that a lot of false negatives will cause my users problems. Is this a valid concern or shouldn't I worry about this?

I have 4260 IPS. I have heard that 5.x is not supported IEV. Only IDS with 4.x support IEV. Now 5.x require CSM for event viewing. I got the 2 CSM CDs in the 4260 box. I also have cisco works cds.Can u please guide me will these are enough to install...

Just wanting to check my work for setting up a site-to-site but only want to give access to a specific host. Is correct?# Access list to specific host.acces-list inside_outbout_nat0 permit ip 10.0.0.9 255.255.255.255 10.254.0.0 255.255.255.0# remote...

I am getting the following error on my ASA5510;7103042 Ike Initiator unable to find policy: Inft outside, Src: 172.16.2.14, Dst: 172.16.3.1007103042 Ike Initiator unable to find policy: Inft outside, Src: 172.16.2.15, Ds...

Hi all, Lets look my configuration:static(inside,outside) tcp 23.56.67.78 www 192.168.1.2 www netmask 255.255.255.255static (inside,outside) tcp 23.56.67.78 smtp 192.168.1.3 smtp netmask 255.255.255.255access-list out_in permit tcp any host 23.56.67....

HelloWe have a ASA 5540 + IPS installed here. Unfortunately the guy that installed left without leaving any documentation so I'm a bit lost with this.We have a 100Mbps FD link to the Internet. The inbound traffic (from the Internet) shows no limit (I...

Hello all,Cisco Newbie here. We have just put a gateway between our PIX 515e and our email server. This gateway needs port 4 open to receive its updates from the manufacturer.Could someone please advise the securist way to do this?Thanks in advanceSt...

I have a pix 506E and I get ~ 20 /sec of the these messages. The message is Deny tcp src outside:xxx.xxx.xxx.xxx/29977 dst inside:yyy.yyy.yyy.yyy/25 by access-group "OUTSIDE_ACCESS_IN" Where yyy.yyy.yyy.yyy is my webserver. I realize that this means...

I am trying to bring up a tunnel between my older 2811 and my new ISR 2811. The tunnel shows QM_IDLE with a sho cry isa sa on both devices but I can't ping across the /30 that I assigned to the tunnel interface and sho ip eigrp neigh doesn't show th...

I have two PIX firewalls configured with two OSPF processes.The edge router is connected to the PIX outside interfaces in one process.I want to make sure the edge router will alwas prefer one PIX over the other, but the one I want preferred has a low...

Hy.I had an problem yesterday when i try to upgrade my fwsm from version 2.3 to 3.2.In version 2.3 i was able to connect to an dmz address directly and to it's inside nat address.But after the upgrade it was not possible anymore to connect to the dmz...