Network Security

The vpn3000 is vpn server and the window pc is client, the pc dial the server traversing the asa .When dial successful,the pc is down.WHY?How to resolve itThanks

what could be wrong with my config? i managed update my IOS IPS with the latest signature definition file to S291.0 and i cant seem to see the signatures or even modify them. part of my config below:ip ips config location flash:/ipsstore/ retries 1ip...

Orginal plan is one uses DYnamic IP and the other uses Statice, but since the dynamic is not working I tried to configure static on both ends but it still will not come up.Stuck on Pahse 1 - I have used PIX and set them up without any problem.Here ar...

Hi,i have a concern about webvpn.after you enable webvpn on the outside interface of ASA, so now anyone can login to the page and try to login , doesn't this have the potential of a brute force attack, can't we restrict who can even see the webvpn pa...

Hi,we have two IDSM/2 modules in two 6500 chassis. Is there any possibility to synchronize configuration between two IDSM-2 modules in two different chassis or I have to do it manually?

Does anyone know if it is possible to schedule what time VPN clients can get access and also set some VPN policies (i.e. IP, ports, etc) using the ASA 5520?Regards,

Hello. I am new to PIX. I have an access-list that is permiting traffic through a port to a machine. The access-line is: access-list acl_outside permit udp any host X.X.X.X eq pcany...

how does the fwsm realise a particular vlan when it is assigned to a vlan group?

Hi folks,Ok here's a question for you that so far has been the 'showstopper' for a CCA deployment in my company:We have a 100% cisco network (2821 router sand 3560G-PoE and 6509 switches) but have non-Cisco voip phones. Switchports are configured wi...

Hi Sir,I'm upgrading an FWSM from version 2.3(3) to the Safe Harbor certified version 3.1(4.0).Release Notes of 3.1(4.0) mentions that ASDM release 5.0F supports FWSM software release 3.1 features.I checked Software Downloads; the latest 5.0F version...

I am doing the following lab testing: nc ?v ?l ?e cmd.exe ?p 565Attacker: nc ?v .x.x.x.x 565I was able to get the remote prompt and the IDS never fires an alarm. Is there a signature for detecting this kind of attack? Or, is there any signature tunin...

We have a Cisco PIX 515E with pix ver. 6.3(4). We are receiving continuous SYN packets for one specific server. Can we control this attack by PIX 515E appliance. Pl advise how to do this if possible by PIX 515E.Thanks in advance.Regards,Raghavan

We use Firegen to generate reports from our syslogs and today I noticed the attached messages. Any suggestions on what might me causing them?The first IP that is marked out is on our DMZ and is the address of our SMTP mail server. The second marked o...

HelloI am currently terminating my ISP's PPPoE connection (static IP) on my Cisco Soho77, and then using an internal IP on my firewalls outside interface and therefore double natting. I dont have a problem with this (makes me feel moer secure) but wa...