Network Security

Hello:I'm getting the following types of log messages on my asa 5505 7.2.65.32.5.74 PublicIP Deny udp src outside:65.32.5.74/53 dst inside:PublicIP/10521 by access-group "outside_access_in" [0x0, 0x0]Basically another DNS server is trying to get som...

In the RME collection status partially successfull config archive; some hosts are showing errors which read as follows:" CM0012: Unable to create new version $1 Action: check if disk space is available and directory has required permissions "The unit...

I have recently consolidated my infrastructure and moved a few websites from DataCenter1 to DataCenter2. DC1 was running a PIX 515 with 6.3.x IOS. DC2 was running an ASA 5510 with 7.0.4 IOS and has been for 18 months.The websites that were moved fro...

We bought 2 IDSMs, and currently are in the stage of evaluating different Management & Monitoring software, like MARS,Enterasys, etc, and would appreciate your hands-on experience and comments. thanks.

One of my failover pair of ASA 5520s need to be replaced. It is the primary unit. Will the following commands suffice:interface GigabitEthernet0/3 description LAN/STATE Failover Interface speed 1000 duplex fullfailoverfailover lan unit primaryfailove...

I found that PCs behind the ASA 5510 are not able to ping any outside ip addresses including the firewall's outside NIC ip. However, users are able to browse any websites as usual. I am new to cisco's firewall. Could someone adviseme on how to trou...

When configuring isakmp key "keyname" address x.x.x.x netmask y.y.y.y - what are the allowed characters for the shared key? I did a search and found several articles that said it could be alphanumeric. I have some existing connections that are usin...

Hi,We upgraded a pair of 515e's last night from 7.2.2 to 7.2.2.22.The upgrade was fine, however when we tested both L2L and Client based VPN connections we hit issues and were finally forced to roll back to 7.2.2 due to time constraints.Our problem w...

Hi All,Here is my dilemma,I have 2x ASA 5520 v802 running multiple context and failover.I also have the AIP-SSM-20 module installed in each running v516E1.My problem is that I am unable to allocate an ips sensor to a context.I receive no output from ...

I am attempting to migrate from 515's to 5520's. Due to the ASA having fewer eth interfaces than the PIX, I am trying to bring two DMZ's (both on 2950 switches)in to a switch (also a 2950, which I'll call the "bridge") on separate VLAN's, then bring...

I have some home managed to break my outgoing VPN connections. We connect to a clients site via Cisco VPN and I originaly got it to work by createing a Dynamic NAT statment NATTIng to .120-.124 of our public IP addresses. Somehow I have managed to ...

I am unable to access a windows 2003 server at a remote location. The server does communicate with an interface server on my side just fine. I can ping and trace route to the server with no issues. Everything seems to be ok EXCEPT when I try to RDP t...

I have a Cisco827-4v c820-k9osv6y6-mz.122-15.T14.binI am setting up QoS CBWFQ over IPsec GRE VPNs tunnels My Issue is regarding Shaping inside my parent policy. In class-map configuration mode inside policy-map configuration mode I can type shape ave...

Is it possible to setup an AIP-SSM Module to log event alerts to Its local cache as well as the Mars Appliance. I say this because I ran some tests for alerts and never see them on the IPS module itself but i do see them on the Mars Appliance correct...

Hi,I have a PIX 525, erase configuration with "write erase" after boot the follow message"Cryptochecksum (changed)" displayed, and I don't have prompt for continued the configuration. What's ?