Network Security

I may be having a possible issue with CSA 5.2. I am hoping someone out there can lend a hand. All CSA agents are in test mode (supposedly nothing is blocked, but events can be logged).Every now and then, a host with the CSA agent does not get a DHCP ...

I am at a Customer site today and am having a bizarre NTP issue occur.The customers outside Perimeter Firewall gets his NTP time from the Border Router (which syncs to tick and tock).I ran debug ntp events/debug ntp packets on the ASA, it gets a mess...

I have a Pix 506 that I'm trying to intergrated as a perimeter firewall.I've looked over the config and see no issues yet I can never get any inbound web services to function off of any of the static NAT statements.Both outside and inside interfaces ...

Recently we configured an IPS 4240 for our customer. We used two of the Interfaces and configured them as an "Inline Interface Pair" and put them between the customers Edge Network and their DMZ.While letting the Engine run last week, each time the I...

I'm setting up a new ASA 5510 and have 5 remote sites that connect back with site-to-site tunnels. We want to force their internet access through our websense server. I know I can do split tunneling but this won't force it to go through websense. Is ...

How to reset to factory setting in PIX 515E.Regards,

Hi Everyone, It's really a great pleasure to join with you.I have a query with respect to VPN Design.There around 500 Branch offices located across india. I want to connect them with headquarters. Due to budgest issues, they cannot go with Leased Lin...

Hi,I've a 2821 cisco router with intrusion prevention system ON. I can update signatures but, when I try to implement signatures, the SDM says that I need a xx.zip format file which has been downloaded from cisco.comI do not have any xx.zip file, onl...

Hi guys,I have a problem with my outlook mail and GPRS. I have installed the my vpn client and i can connect but i cant download any outlook mail. I have asa5505 as my vpn box and have allowed smtp, pop3, isakmp,http from outside

We need to migrate our ASA from a T1 router internet connection to a DS3 router internet connection. Both routers and the ASA are connected to a switch. The ASA is currently configured and operating with a 1.1.1.0/25 IP range. The DS3 has a 2.2.2.0/2...

All, After I connect via VPN, I get a default gateway of 10.0.0.1. I reviewed my config, and there is nothing showing 10.0.0.1. Where does this default gateway come from? How can I specify it not to have a default gateway?

Recently I was tuning out some false positives and was unable to generate the rules due to a complexity of greater than 7500 exceeds maximum of 7500. I searched the forum and found out the there is a limit to the number of complexity points set at 75...

I'm troubleshooting a PIX 506 config and came across the Cisco document:http://www.cisco.com/warp/public/110/pix_pptp.htmlthat says:"Multiple PPTP Connections Fail when using PAT You can only have one PPTP connection through the PIX Security Applianc...

Hi, I'm just trying to budget for a ASA 5520 to upgrade from our Cisco PIX, I got a quote but the didn't realise that adding IPS almost doubles the cost, do many of you recommend this feature or is it a nice to have than a necessity?Thanks