Network Security

I want to see which items are modify.show run command show all running configuration.But i want to see only modify record.

I have a Pix 515E active/failover IOS v7.2 The failover process works perfect. I test powering down one unit, and then the other en works perfect. But, as soon as I do "write stanby" in the active unit, the passive unit goes down (the insde interface...

Hi Sir,I have an FWSM installed in a Catalyst 6509 in module 4. The FWSM runs software version 2.3(3). The Catalyst 6509 runs CatOS 8.3(4) on Sup720.Today I can't session into the blade from the Catalyst 6509 switch. I receive the following error:Cat...

when configuring our PIX through the ASDM we keep getting the this error message " [error] wr mem ASDM recieved an error while sending this command.Click Resend and,if the browser prompts you to verify a new certificate or to provide a username and p...

I have a couple 26xx's running SNAT. They are front-ending a connection to an ASP. I'd like to replace them with ASA 55xx's. Can ASA's do Synchronous NAT?Thanks, Mike.

HI, I have 2 questions.Is it possible to change the password of the VPN client password dynamically without the need to redistribute profile pcf file to the clients? Can the clients connecting by the Cisco VPN software be restricted to those with a k...

I've been trying to configure CSM 3.1 to manage an IPS module (AIP-SSM) in an ASA 5510. I can add the ASA, which is running V8 software, to the CSM and push policies etc without problem. But I cannot figure out how to add the IPS module into CSM. Whe...

On an 877 and an 871 with 12.4(15)T1 and SDM 2.4.1, IPS version 5 signatures are not showing in the 'Configure-->IPS' screen. Anyone else experiencing this behavior?See attached doc.

has anyone had any problems with telnetting to an ASA 5550 firewall? I try to telnet but connection is refused, it does that for SSH connection as well. i am not sure if there is any other commands that need to be added to allow for inside interface....

I have seen two ways to deploy DMZ's. One has an interface off the ASA become a DMZ and then you configure all the associated rules, NAT etc for traffic flow, inside to DMZ and DMZ to inside.I have also see ASA's deployed with a simple Inside and Out...

I'm trying to delete a NAT rule but I keep getting the message:"The operation you are trying to perform will result in some security rules being nullified. Please review your translation/security rules and try again".I'm using a PIX535 with software ...

IPS 6 is reporting the STORM WORM...MARS says it is an Unkown Device Event Type. I have latest code and sigs on all platforms.Does this report from MARS indicate that I have to train and/or make a catagory or something like that on MARS?I want MARS t...

Hi,I have a concern related to DC (Domain Controller) located into DMZ on ASA running 7.2.The scenario as following, all LAN segments reside behind the ASA's inside interface as well as the DC server, I have a bunch of branches connected all the way ...