Network Security

I recently migrated our firewall from pix 6.3 to asa 5510. After the migration only the users having ip address 10.100.0.x can connect to the internet except the others having the IP address 10.100.1.x and 10.100.2.x. Everything else works fine as be...

Hello, trying to select device from the selector pannel (for ex. to assign new snmp settings), I can't see the device name locked. It seems IDSM isn't able to lock the devices.I have a 2.1 IDSM. Java is 1.4.2_08 like requested.Thanks

I have a cisco VPN client connecting to my PIX, it's getting an IP address from the PIX, and I see debug messages indicating that it has connected. However, I cannot seem to do anything on the VPN network - can't ping, can't "net view", can't http t...

Hi,We have got a deployment of IPS v6 with MARS which is thus far quite effective in mitigating most of the issues.However I'm bit stuck with a scenario and require help, my question goes as below:-1. For all the TCP based attacks, I guess the best w...

Hello,we are building a new site in Russia, Moscow this week (actual, I'm sitting here!). We have bought an ASA5505 as VPN Tunnel endpoint in Moscow and would like to connect to our WHQ in US.The WHQ Team provides me a sample config for an 871 Router...

Hi,We have an application which polls via SNMP the ARP table of the routers. In a traditional network, that doesn?t cause a problem but in a MPLS network, the answer contains only ARP in the GRF!Is there a SNMP oid to get ARP table by GRF/VRF?ThanksK...

HelloI have recently installed LMS2.6 with all the latest software for each of the components i.e. CiscoWorks Common Services 3.0.5,Ciscoview 6.1.5, Resource Manager Essentials 4.0.5, Ciscoview 6.1.5, Device Fault Manager 2.0.8.I have over 600 router...

I have a DMZ (192.168.4.0/24) setup for my web server on a PIX 515. When I put a laptop (running XP Pro) in the DMZ to test connectivity to the inside it is able to hit all the resources with a ping so I believe that traffic is flowing correctly. T...

The setup is: Internal SIP proxy (private IP address) trunks to Internet SIP proxy. The private IP address shall be translated into a public address in the IP and SIP headers. My ASA (7.2.2) configuration using static NAT and a SIP Inspect map doesn'...

All,I have an 2811 router with advanced security IOS, two site-site VPNs are terminated on it. On the public interface I added an ACL which allows IPSec traffic and EIGRP - that's the routing protocol to the neighbor Border router. IPSec tunnels are ...

...never tried easyvpn before...do I still need the interesting traffic ACL on the ASA server side for the LAN subnet on the 501 client inside subnet? The tunnel is always up so I suppose it knows innately how to get to the client 501 side...

Hello,i have here a asa 5505 with unlimited/DMZ Software. I have the Problem, that a have another Router in the Internal Site and i have set a Route to the ASA how route the Packets for the Other Network to the Router. The ASA is the Default GW in th...

I have an ASA5510 that keeps requiring me to do a password recovery ever so often at random. I notice this happens if I attempt to access via secureCRT ssh client and then try and use the gui. I reset password and then can access it. Anyone else seen...

Hi,I have 2 ASA boxes, connected by L2L IPSec tunnel.I have Cisco Security Manager connected on one interface of first ASA. Is it possible to manage by CSM second ASA via L2L IPSec tunnel. If it is possible which IP address can I use for connection...