Network Security

Hi,We have got a deployment of IPS v6 with MARS which is thus far quite effective in mitigating most of the issues.However I'm bit stuck with a scenario and require help, my question goes as below:-1. For all the TCP based attacks, I guess the best w...

Hello,we are building a new site in Russia, Moscow this week (actual, I'm sitting here!). We have bought an ASA5505 as VPN Tunnel endpoint in Moscow and would like to connect to our WHQ in US.The WHQ Team provides me a sample config for an 871 Router...

Hi,We have an application which polls via SNMP the ARP table of the routers. In a traditional network, that doesn?t cause a problem but in a MPLS network, the answer contains only ARP in the GRF!Is there a SNMP oid to get ARP table by GRF/VRF?ThanksK...

HelloI have recently installed LMS2.6 with all the latest software for each of the components i.e. CiscoWorks Common Services 3.0.5,Ciscoview 6.1.5, Resource Manager Essentials 4.0.5, Ciscoview 6.1.5, Device Fault Manager 2.0.8.I have over 600 router...

I have a DMZ (192.168.4.0/24) setup for my web server on a PIX 515. When I put a laptop (running XP Pro) in the DMZ to test connectivity to the inside it is able to hit all the resources with a ping so I believe that traffic is flowing correctly. T...

The setup is: Internal SIP proxy (private IP address) trunks to Internet SIP proxy. The private IP address shall be translated into a public address in the IP and SIP headers. My ASA (7.2.2) configuration using static NAT and a SIP Inspect map doesn'...

All,I have an 2811 router with advanced security IOS, two site-site VPNs are terminated on it. On the public interface I added an ACL which allows IPSec traffic and EIGRP - that's the routing protocol to the neighbor Border router. IPSec tunnels are ...

...never tried easyvpn before...do I still need the interesting traffic ACL on the ASA server side for the LAN subnet on the 501 client inside subnet? The tunnel is always up so I suppose it knows innately how to get to the client 501 side...

Hello,i have here a asa 5505 with unlimited/DMZ Software. I have the Problem, that a have another Router in the Internal Site and i have set a Route to the ASA how route the Packets for the Other Network to the Router. The ASA is the Default GW in th...

I have an ASA5510 that keeps requiring me to do a password recovery ever so often at random. I notice this happens if I attempt to access via secureCRT ssh client and then try and use the gui. I reset password and then can access it. Anyone else seen...

Hi,I have 2 ASA boxes, connected by L2L IPSec tunnel.I have Cisco Security Manager connected on one interface of first ASA. Is it possible to manage by CSM second ASA via L2L IPSec tunnel. If it is possible which IP address can I use for connection...

Hi,I am trying to build one IPSec tunnel where i am using the Multilink interface as a source on my end router.But i am unable to build this tunnel up.Now i have doubt like whether we can build IPSec tunnel on multilink or not?If we can configure the...

We are looking at redesigning our current infrastructure, currently we have a Cisco 3060 concentrator that terminates all client and site-2-site tunnels and all traffic is directed to our corporate dmz interface (firewall) for the next hop. All extra...

Hi,I have a question about PIX 515E....is possible to upgrade IOS for this machine? And what is the lastest version?Thank you.