Network Security

Hello,From which PIX OS version is it possible to assign a /31 address mask to an interface? In version 6.3(4) if I try to assign an IP with subnet mask 255.255.255.254 I get the error:"Warning : IP and subnetmask form invalid pair indicating broadca...

The boot sequence stop at this point:CISCO SYSTEMS PIX FIREWALL Embedded BIOS Version 4.3.207 01/02/02 16:12:22.73 Compiled by morlee 128 MB RAM PCI D...

Dear all,I have Pix 520(6.3(3)) and i'd like to replace it with another one PIX525 (7.0 or 7.2(2)) But the problem is in the old config ( Conduit ,Fixup,interfaces , VPN and...)how can i convert (move) the old config (6.3(3)) to the new one (7.2(2) o...

Hi all, I manage pair of 515E (both 128MB) in failover mode. Few day ago I occured some akward situation: in 2-3 hours memory usage rise form standard 63MB to 112MB (w/o traffic rise) and than PIX no1 refuse all outside connection (all inside network...

Hi all,I tried to find out Failover/High available solutions for IPS 4200 series,I didn't saw failover solutions in IPS guide document. Anybody can be help me!

When configuring the cepsetup.exe on my stand-alone CA, what specifically do I have to put into the Name: Email: Company: (etc) fields? The hostname of my ASA? The FQDN of my ASA? Thanks!

I want to put my FWSM in transparent mode. I have created the configuration on my 6500:firewall multiple-vlan-interfacesfirewall module 6 vlan-group 1firewall vlan-group 1 100,101!interface vlan 100ip address 192.168.100.1 255.255.255.0!Config in my ...

Hi,Is there a way to fully automate signature updates? By that I mean something that automatically downloads updates from Cisco and then automatically pushes them to IPS.Thanks,Tanya

I was reviewing the configuration a new ASA5505 running 8.0 and I saw the following statement in the configuaration: dynamic-access-policy-record DfltAccessPolicyNot knowing what the command does, I tried to remove it but an error stating I am not pe...

Hi,Customer wants to implement NAC out-of-band in their organization. But he has some query:1. In out-of-band whether CAS will fetch the updates (AV, Patch management etc)from the corresponding servers & push the same to the end user?2. What will be ...

Is it possible to build a CSA rule to stop a wireless laptop from attaching to a wireless network with the SSID of "guest"??If so how??

Hi,We are going to buy ASA 5505 firewall for our SMB office. In the product specification is said, there are licenses needed for VPN and SSL.I am a bit confused. Why I need VPN and SSL for firewall? When we run our web server the SSL certificate is o...

Hello, I'm currently looking into IDS placement and such. I had a thought about for a bit and wondered, what is the true difference between a Monitor Session off of a 3560 switch vs a true network TAP? Is there any way to get Layer 1 and 2 err...

Hi,I have an ASA5505 running IOS 7.2(3) and ASDM 5.2(3). About every 2 pr 3 weeks I have to reboot the ASA because it looses Internet connectivity. Once I reboot the ASA the Internet comes back. What could be causing that and how do I fix that? Any s...