Network Security

Hi all,I am implementing IOS IPS on a 3800 router but I am not sure if when I enable it all the previous TCP sessions already active across the router will be dropped by the inpsect (because the IPS never saw when all those sessions started).Any comm...

Hi allI'm running a productive ACS 4.1 server that authenticates wireless users using LEAP. Today, we had a service outage, and when I look into the log, among other messages, I can see the following authen-failure-code: Internal error.It appeared se...

We are just about to purchase a Cisco ASA 5505 Security Plus Firewall and would like to know the restrictions of useing the 2 POE ports, can they be used as ordinary ports with out this feature ?Can you turn off the POE feature for these ports?Do the...

Can you add more than one community string to PIX firewall running 6.3?If so,Is it an ok practice to have a RW string on a PIX firewall in addition to the RO string?

i have a vpn user that i want to restrict access to only one subnet.we are using a cisco vpn concentrator 3000 series.

I have a PIX 515E with a 4 port FE card and an ASA 5520 with 4 GE interfaces and I need to know if I can enable isakmp on two interfaces on the same firewall. I have included a drawing for a little better understand of what I am trying to do.

I configured a PIX 506E with two internal vlans. One vlan is called DMZ and the other is called vlan4. I want a device on vlan DMZ to ping a device on vlan4. In order to make this possible, I needed to create an access. However, I can not get my ...

Hi,we are receiving hundreds of the following entries in our syslog. I have checked the timeouts and all seems fine. All timeouts happens at 20 seconds. %FWSM-6-302014: Teardown TCP connection 145769459373785053 for outside:<ip add>/3873 to inside:<i...

I have a Pix 515e that I need to forward a port. this should be a simple task but for some reason it is not working. I have attached my config file I need to forward FTP to mcs-sbs01 I have the nat setup in the config I attached it has ** above and...

Trying to find out what the command would be to make a "Comment"Thank you.

Hi,Actually , i installed CSA MC on a server (its name CSAMC.NMEG.Loacl), and i tried to install the CSA on a group of servers . The CSA MC and these servers are in the same domain. One of these servers (its name EG-NMEG-BACKUP.NMEG.LOCAL)is register...

We are using Cisco Security Agent 5.1.0.79. We have 491 clients, mostly Win XP.We have noticed that within 3 days of CSA installation on a PC, WMI quits working. If you try to connect to a PC using wmimgmt.msc, you get the message: "Failed to connect...

Hi I am getting the following errors when trying to ssh between 2 servers over the VPN tunnel. I see it is going out of my acl_inside access-list but I do not see it reaching the VPN acess list. There is no natting between the 2 ips.# no natting fo...

if I purchase ASA5510-SEC-BUN-K9 bundle, will I get two units or just one? In case of just one, what exact part no must I order in order to have two units in failover?thanks