Network Security

I have a Cisco 3005 Concentrator with a public and private IP addres. Private IP address is 172.22.0.3 . Backbone switch Cisco 4506 is 172.22.0.5 255.255.0.0 Client connect to VPN via IPSEC using Radius-Auth with expry to IAS server inside the networ...

hello,suppose there is one host who is accessing two different servers in the network.when host A access to host B all we have to do is make sure that it gets to talk to it one to one thus i configure thisstatic (inside,outside) tcp 60.x.x.72 3392 20...

Can you have multiple subnets on the outside of a Pix 515E with 6.3(3)? I have run out of addresses and adding a subnet would take much less configuration changes. I have a 2801 router with a T1 card with the Pix 515E behind it. If I just set up the ...

Hi,Can anybody confirm whether it is possible to assign Users to specific Vlans based on Active Directory attributes.Cisco NAC 3100 Series devices will be deployed in the installation. At present no posture assessment is necessary, only Vlan assigmen...

i have downgrade the ios version on pix 525 from 7.2(1) to ios version 6.3(2),but now i have found problem with the failover unit that is when i configure the failover for redundency it shows the message that there is no license for failover,plz guid...

Has anyone had problems getting the S283 Signature on the 5.1-5 version to load correctly with the upgraded 3.1 CSM? I got the S282 signature to upload but no luck on the S283

I just recently changed the IP pool for my VPN clients from class B to a class C.I assinged 192.168.1.1-253 for the range.I have a VPN client who is wireless and his netgear assigns him 192.168.1.2. He can validate on the VPN but cannot resolve names...

I'm getting some alarms for signatures that I think are a bit too sensitive -- 3051, for example. It makes sense to me to adjust the Minhits or AlarmInterval to make the signature less sensitive, increasing the level of activity before an alarm occcu...

Ok, I am trying to have an FTP server (eFTP if it matters) in my web dmz. Basically have the server with a private performing NAT to a public address, no big deal, I have enabled the appropriate port for forwarding (21) - and I can set what other por...

Hi all, Could you please tell me if I can log url pages visited in inbound and outbound connection through Cisco Asa?I tried with logging trap debugging but i see only layer3/4 information.Thanks!Marco

Hi,My firewall is PIX 525 with IOS version 7.2. Is it possible to use trendmicro IWSS as URLfilter instead of N2H2 or Web sense.Thanks,siva

Well, this is my first Pix experience, and after reading through the doc, I am still with some questions.In the network diagram I send you, have the pix outside interface (to DMZ) to be announced in a public DNS for me to have access to the internet,...

I'm trying to figure out how to select signatures. I suppose one could just watch the alert chatter and disable or delete signatures that seem too noisy. Doesn't seem very secure. I'd prefer to analyse the traffic that's triggering them, but if I onl...

We have a client using an IWATSU phone systems with IP cards int it. The clients config is like this; (Remote Site) Phone Switch | Ethernet Switch | Cisco 2811 (VPN Tunnel) | INTERNET | Cisco 2821 | Cisco ASA 5540 (VPN Tunnel), (NO IDS inspection on ...

I see that version 4.2.6 was released today. I am unable to find any release notes as of yet. Anyone else see them, or am I missing something.With past history, I don't think I will be applying any upgrades without at least being able to see what Cis...