Network Security

Hi everyone,I've got an extremely stupid question - is there an IOS feature which I could use to limit the number of simultaneous established TCP sessions towards a single host? Sounds like stateful inspection but haven't seen such a thing there. TCP...

I want to allow certain users to connect to my comncentrator, but then only allow them to have access to a single server on the LAN side.Please help.

We have implemented IPS to monitor on a 2811 router...once this was applied to all the interfaces the router cpu went up to 99% and the customer started having issues...I have attached a print screen from what the IPS was seeing...can anyone shed som...

I was wondering if it is possible to have multiple inside(100) interfaces.I have say two customers that need to be seperated.I have created two subinterfaces(gi0/1.1 and gi 0/1.2)IP addresses are 192.168.1.1/24 & 192.168.2.1/24.They are both assigned...

If we set tcp max connection to 0 which means no limits on the connection, over 65535 simultaneous connections can be made through the static nat?

Can the Pix 515e be configured to support vla and or trunks?

Hello,need help from IPS regex guru - trying to build the signature to detect SQL update statement in HTTP requests.1) Am I correct with regex below specified as Request-Regex?[Uu][Pp][Dd][Aa][Tt][Ee]([%]20|[+])[\x20-\x7e]+[Ss][Ee][Tt]([%]20|[+])[\x2...

hello, my question is:how can I configure a tunnel from 1811 to another vpn router if the other router has a dynamic IP?, 1811 has static IP.

Hi, I have run into a strange problem when attempting to allocate VLANs from a 6500 switch (running CATOS) to a FWSM running in multiple context mode located within the 6500 chassis. The issue is that when I enter the command on the 6500 to include t...

I have be testing our vpn connection and I have come up with a pattern of when we lose the telnet/ssh connection to our HQ.It happens between 20 minutes and 25 minutes after the hour. In other words, I lose my connection at:23:2200:2301:2302:2303:25I...

Hi,I would like to find out if it is possible to retrieve an active IPS signature policy from the device? I would like to obtain a complete policy currently running on the sensor not via CLI.P.S. I was under the assumption that the sensor will stor...

I am having problems setting up a site-to-site VPN. I used the VPN Wizard and the configuration matches an existing VPN that is working. The IKE Tunnel displays on the 501 home page but the IPSec Tunnel does not appear. As well, I do not see any e...

I it possible to have a dual WAN with PIX515E so that if one goes down the other will take over to allow internet to always be up. Also is it possible to have the pix choose which internal network to send the vpn client to depending on the login. I...

Hello Pros,Could any one give the config scripts for the ASA 5500 pair failover configuration in transparent mode. I configured it as transparent but the failover task is left to do. Please give the cmds for the failover for the transparent mode not ...