Network Security

I want to put my FWSM in transparent mode. I have created the configuration on my 6500:firewall multiple-vlan-interfacesfirewall module 6 vlan-group 1firewall vlan-group 1 100,101!interface vlan 100ip address 192.168.100.1 255.255.255.0!Config in my ...

Hi,Is there a way to fully automate signature updates? By that I mean something that automatically downloads updates from Cisco and then automatically pushes them to IPS.Thanks,Tanya

I was reviewing the configuration a new ASA5505 running 8.0 and I saw the following statement in the configuaration: dynamic-access-policy-record DfltAccessPolicyNot knowing what the command does, I tried to remove it but an error stating I am not pe...

Hi,Customer wants to implement NAC out-of-band in their organization. But he has some query:1. In out-of-band whether CAS will fetch the updates (AV, Patch management etc)from the corresponding servers & push the same to the end user?2. What will be ...

Is it possible to build a CSA rule to stop a wireless laptop from attaching to a wireless network with the SSID of "guest"??If so how??

Hi,We are going to buy ASA 5505 firewall for our SMB office. In the product specification is said, there are licenses needed for VPN and SSL.I am a bit confused. Why I need VPN and SSL for firewall? When we run our web server the SSL certificate is o...

Hello, I'm currently looking into IDS placement and such. I had a thought about for a bit and wondered, what is the true difference between a Monitor Session off of a 3560 switch vs a true network TAP? Is there any way to get Layer 1 and 2 errors sen...

Hi,I have an ASA5505 running IOS 7.2(3) and ASDM 5.2(3). About every 2 pr 3 weeks I have to reboot the ASA because it looses Internet connectivity. Once I reboot the ASA the Internet comes back. What could be causing that and how do I fix that? Any s...

Hi all experts,i'm using PIX6.3(5) is it possible to route IPSEC traffic coming through one tunnel , decrypt , encrypt again and send it back through a new VPN tunnel.Basically an U-turn of IPSEC traffic on outside interface-> decrypt ->encrypt again...

I'd likt to know about NAC solution.Is it possible Cisco NAC(clean access server and manager) with third party agent as like symantec altiris agent?

Hi everyone, I have just updated a PIX 525 from software version 6x to 8x.I have a question on how PDM in version 6x automatically converted access-lists so they worked with outside NAT addresses ? but in version 8x (using ASDM) this is not the case....

Is there a way to include the first 64 bytes of a packet in the alarm message for a particular signature?

WHY I View THE Serial Number of PIX-1GE-66?Which command?TKSMart?n

HI ,I need one user to acesss only sh run .The command I used was aaa-server LOCAL protocol localaaa authorization command LOCALusername tester password tester encrypted privilege 3privilege show level 3 command running-configBut he is able to view a...