Network Security

Hi I try to enable IOS IPS on my 7204-G2 router but have few problems.I use IOS c7200p-adventerprisek9-mz.124-15.T1 and signatures IOS-S297-CLI.I use this doc http://www.cisco.com/en/US/products/ps6441/products_feature_guide09186a0080747eb0.html .At ...

Hi,I've always read we should not configure dynamic routing protocols on Firewall. Why?We can control routing updates using route filters and allow what updates should be allowed bet rouer/fw then what is the harm in configuring it.?Can someone pleas...

I am wondering why it is not possible to fetch the arp table off a ASA running version 7.2? Is there a plan to implement that useful feature in further release?

Hi guys..this is only a simple question...I cant view or access our PDM tools of PIX515.Ive tried it already in browser but nothing happened.should i download it?by the way our version is 6.3..many thanx

We have a list of 3 domains that we cannot access. We just get "The page cannot be displayed" message. The domains aremetriceng.comqrinc.comcorgan.comWe are able to resolve DNS just fine. However, if I point the default gateway on my system to our...

I have ASA5510 set up. By using NAT, the inside hosts can access internet. If I want to just block certain hosts, for example (ip: 192.168.1.112) to access internet. How do I do it?

Can you configure a network filter to allow a remote client to only access certain hosts in a subnet?We have a support company the we would like to limit access to only two servers in two different subnets, is that possible?

Hi guys.I want to know if anyone can tell me if it is possible to configurate a 2800 router with the feature Zone-Based Policy Firewall and using a NM-CIDS as IDS.The idea is put the 2800 between wireless zones and pass the traffic over the NM-CIDS.T...

Hello:I'm getting the following types of log messages on my asa 5505 7.2.65.32.5.74 PublicIP Deny udp src outside:65.32.5.74/53 dst inside:PublicIP/10521 by access-group "outside_access_in" [0x0, 0x0]Basically another DNS server is trying to get som...

In the RME collection status partially successfull config archive; some hosts are showing errors which read as follows:" CM0012: Unable to create new version $1 Action: check if disk space is available and directory has required permissions "The unit...

I have recently consolidated my infrastructure and moved a few websites from DataCenter1 to DataCenter2. DC1 was running a PIX 515 with 6.3.x IOS. DC2 was running an ASA 5510 with 7.0.4 IOS and has been for 18 months.The websites that were moved fro...

We bought 2 IDSMs, and currently are in the stage of evaluating different Management & Monitoring software, like MARS,Enterasys, etc, and would appreciate your hands-on experience and comments. thanks.

One of my failover pair of ASA 5520s need to be replaced. It is the primary unit. Will the following commands suffice:interface GigabitEthernet0/3 description LAN/STATE Failover Interface speed 1000 duplex fullfailoverfailover lan unit primaryfailove...

I found that PCs behind the ASA 5510 are not able to ping any outside ip addresses including the firewall's outside NIC ip. However, users are able to browse any websites as usual. I am new to cisco's firewall. Could someone adviseme on how to trou...

When configuring isakmp key "keyname" address x.x.x.x netmask y.y.y.y - what are the allowed characters for the shared key? I did a search and found several articles that said it could be alphanumeric. I have some existing connections that are usin...