Network Security

HiHow The IDS TCP Reset work. I get configure with the IDM but i need explanation of it. have any drawback of Reset function ??.ThanksBiplob

Hello,Is there any online lab on the Internet where I can try the ASA 5500? I'd like to practice to configure a site-to-site VPN scenario on the ASA 5500.Thank youjnguyen0712

Hi, my cisco pix goes out on the internet on an external IP, how can I tell it to go out on a different IP? I ave many external IP's free in my scope, would I just assign another IP on the "outside" interface?

Are there any Basic IPS Features (functionality) included in ASA without AIP-SSM?

Hi!Does anybody have experience with AD in IPS6? I tried to test it today with 3 nmap sessions each scanning 100 different IPs. I saw the Sig 13003-0 (single scanner) fired:signature: description=AD - External TCP Scanner id=13003 version=S262 alertD...

can a pix failover to an asa or vice versa or do they have to be the same device.

I need to punch a whole through this ASA to get port 25 and 443 traffic through can someone give me the command to do that? Currently it's a mail server on the other side of an ASA. I have the following Static on the ASA.static (inside,outside) tcp 2...

Hello, I'm having serious issues getting a PIX 515E seen on the network to perform a password recovery. I set the address, gateway, and server address. Setup the tftp server, but iI cannot ping the device. Any sugestions?

Hi Gurus et al.I've inherited a large group of routers and I'm working to modify the enable secret them. These are all cisco 831 routers running 12.3(8)YA1 using EzVPN to connect to our WAN. The startup-config is generic in nature and is used in conn...

I would like to ask my fellow security geeks out there to assist me in determining the types and amount of non-vpn traffic going from inside to to the internet. I don't have Net Flow, and I don't have time to put a sniffer on. Is there some type so c...

Hi,I have a camera system in the internal network and don't want to allow direct access to that system from the internet. Has anyone tried to proxy such traffic through a DMZ connected host ?regardsChristoph

Using "US-CERT Critical Infrastructure Information Notice CIIN-08-005-01 January 05, 2008" as the reference. I'd like to create a custom signature that looks for the string "0.js"The effort is to determine if my webservers have been or will be impact...

I have an ASA firewall and I want to block the users to transfer files in the MSN instant messenger. I know there is a feature in Application Policy that should take care of it but it's not workint, I've set the IM inspection and set the File-transfe...

Does the Regex engine used by the IPS support lookahead syntax? I'm working on creating a custom signature using the TCP String engine that I want to fire if it both finds a given string, and does not find a second string. A negative lookahead seemed...