Network Security

Hi,We are getting some events on IPS for Nmap UDP Port Sweep (Signature - 4003). Attacker shows an external address, what can I do for this alert, what actions can I take?

We migrated our old Borderware firewall to Cisco asa5520 and noticed the CPU on it always over 30% and sometime over 60%/70%. I was wondering if there is anything I can do to improve performance and resolve this issue. The interfaces looks okay and w...

I currently have an ASA5520 as my firewall and a 3005 VPN Concentrator in front of the firewall terminating VPN tunnels with a public peer address of say 1.2.3.4. The ASA 5520 also has a public IP address (say 1.2.3.6) in the same subnet as the publ...

I recently migrated our firewall from pix 6.3 to asa 5510. After the migration only the users having ip address 10.100.0.x can connect to the internet except the others having the IP address 10.100.1.x and 10.100.2.x. Everything else works fine as be...

Hello, trying to select device from the selector pannel (for ex. to assign new snmp settings), I can't see the device name locked. It seems IDSM isn't able to lock the devices.I have a 2.1 IDSM. Java is 1.4.2_08 like requested.Thanks

I have a cisco VPN client connecting to my PIX, it's getting an IP address from the PIX, and I see debug messages indicating that it has connected. However, I cannot seem to do anything on the VPN network - can't ping, can't "net view", can't http t...

Hi,We have got a deployment of IPS v6 with MARS which is thus far quite effective in mitigating most of the issues.However I'm bit stuck with a scenario and require help, my question goes as below:-1. For all the TCP based attacks, I guess the best w...

Hello,we are building a new site in Russia, Moscow this week (actual, I'm sitting here!). We have bought an ASA5505 as VPN Tunnel endpoint in Moscow and would like to connect to our WHQ in US.The WHQ Team provides me a sample config for an 871 Router...

Hi,We have an application which polls via SNMP the ARP table of the routers. In a traditional network, that doesn?t cause a problem but in a MPLS network, the answer contains only ARP in the GRF!Is there a SNMP oid to get ARP table by GRF/VRF?ThanksK...

HelloI have recently installed LMS2.6 with all the latest software for each of the components i.e. CiscoWorks Common Services 3.0.5,Ciscoview 6.1.5, Resource Manager Essentials 4.0.5, Ciscoview 6.1.5, Device Fault Manager 2.0.8.I have over 600 router...

I have a DMZ (192.168.4.0/24) setup for my web server on a PIX 515. When I put a laptop (running XP Pro) in the DMZ to test connectivity to the inside it is able to hit all the resources with a ping so I believe that traffic is flowing correctly. T...

The setup is: Internal SIP proxy (private IP address) trunks to Internet SIP proxy. The private IP address shall be translated into a public address in the IP and SIP headers. My ASA (7.2.2) configuration using static NAT and a SIP Inspect map doesn'...