Network Security

We bought 2 IDSMs, and currently are in the stage of evaluating different Management & Monitoring software, like MARS,Enterasys, etc, and would appreciate your hands-on experience and comments. thanks.

One of my failover pair of ASA 5520s need to be replaced. It is the primary unit. Will the following commands suffice:interface GigabitEthernet0/3 description LAN/STATE Failover Interface speed 1000 duplex fullfailoverfailover lan unit primaryfailove...

I found that PCs behind the ASA 5510 are not able to ping any outside ip addresses including the firewall's outside NIC ip. However, users are able to browse any websites as usual. I am new to cisco's firewall. Could someone adviseme on how to trou...

When configuring isakmp key "keyname" address x.x.x.x netmask y.y.y.y - what are the allowed characters for the shared key? I did a search and found several articles that said it could be alphanumeric. I have some existing connections that are usin...

Hi,We upgraded a pair of 515e's last night from 7.2.2 to 7.2.2.22.The upgrade was fine, however when we tested both L2L and Client based VPN connections we hit issues and were finally forced to roll back to 7.2.2 due to time constraints.Our problem w...

Hi All,Here is my dilemma,I have 2x ASA 5520 v802 running multiple context and failover.I also have the AIP-SSM-20 module installed in each running v516E1.My problem is that I am unable to allocate an ips sensor to a context.I receive no output from ...

I am attempting to migrate from 515's to 5520's. Due to the ASA having fewer eth interfaces than the PIX, I am trying to bring two DMZ's (both on 2950 switches)in to a switch (also a 2950, which I'll call the "bridge") on separate VLAN's, then bring...

I have some home managed to break my outgoing VPN connections. We connect to a clients site via Cisco VPN and I originaly got it to work by createing a Dynamic NAT statment NATTIng to .120-.124 of our public IP addresses. Somehow I have managed to ...

I am unable to access a windows 2003 server at a remote location. The server does communicate with an interface server on my side just fine. I can ping and trace route to the server with no issues. Everything seems to be ok EXCEPT when I try to RDP t...

I have a Cisco827-4v c820-k9osv6y6-mz.122-15.T14.binI am setting up QoS CBWFQ over IPsec GRE VPNs tunnels My Issue is regarding Shaping inside my parent policy. In class-map configuration mode inside policy-map configuration mode I can type shape ave...

Is it possible to setup an AIP-SSM Module to log event alerts to Its local cache as well as the Mars Appliance. I say this because I ran some tests for alerts and never see them on the IPS module itself but i do see them on the Mars Appliance correct...

Hi,I have a PIX 525, erase configuration with "write erase" after boot the follow message"Cryptochecksum (changed)" displayed, and I don't have prompt for continued the configuration. What's ?

Hi all,I need to change my border router to a 1721 with one sdsl and one adslinterface. This then connects to a pix 506e but the 1721 has beenconfigured with public ip's on the wan's (each ip is from a differentrange) they are then nated on the fa to...

Hi All,I have the following scenario. We have 2 6509s running HSRP on the distribution layer. These 2 boxes are connected using Layer 2 links to the access switches. One of the access switches is also a 6509 and it needs to be firewalled off from the...

I haven't read anything about load balancing or failing over between two WAN connections so I assume the ASAs do not support it but I wanted to try and get a definitive answer. Thanks.