Network Security

Hi.Has anyone implemented CS-MARS with ASA in active/standby, each with IPS modules?What is the procedure for adding the devices to CS-MARS - do I define each box separately -(remember the active and standby both have the same name) or do I just defi...

Hi,I configured the PIX firewall and want to allow the web access from one DMZ to another DMZ.But when ever the B.O user access my web server in D-DMZ from S-DMZ(B.O), the packets are always going to INSIDE lan.I have attached my network diagram and ...

Hello. We recently obtained Cisco ASA 5540 firewalls and I noticed they have an Aux port. Generally I disable this by doing line aux 0no execHowever, of course, the firewall 7.2 operating system has nothing similar. I checked the Command Line Refe...

i have pix515E IOS 7.04 installed at my network. yesterday i worked and configure pix interfaces, static NAT, syslog, static routes and access-list and then i left the next morning i came office and try to use NET there is no response, i check syslog...

does the pix 535 do anti-spoofing by defualt?

I have a Pix 525 running 7.02 OS using the 5.0 VPN client. I'm trying to configure this to use RSA tokens to authenticate. I added the following lines to my Pix config:aaa-server <group name> protocol sdireactivation-mode timedaaa-server <group name>...

We are trying to connect our new 4240 to our 4500 using a copper GBIC, but it seems that whenever we create the span session on the switch, it changes the interface state from up/up to up/down. Any ideas?

Hi,we are using CA unicenter as a Network monitering tool NNM module (Spectrum ).We are unable to get reliability of serial link value which can be monitered and can be tracked to be used for generating an alarm.any link on cisco.com ?Thanks in ad...

Hi all,I am facing a problem trying to establish a tunnel with one of our supplier.Their side is terminated on a IOS router currently unknown type and version (should be 12.2 - 12.4), my side is an ASA 7.2(2), configurations are attached (at least th...

I manage a seried of Linux servers and we have has a number of successfull DOS attacks recently (SYN_FLOOD). The guys I co-locate with do not know enough about the CISCO equipment to configure measures against this.Therefore they have given me the l...

I'm trying to determine what's chewing up all of my Bandwidth. Do you guys know of a way or a tool to monitor this? I'm looking for identifying the traffic.

Hi,I have been running a PIX 520 with 6.3. Now coding a PIX515E with 7.1. I decided to read a manual ;)Now I was amazing at the different NAT and policies.What is the best way to do things - on my old firewall I just had access lists binded to my int...

In a typical Active/standby failover scenario, is it complulsory to have an IP reachability between a pair of interfaces ? For e.g DMZ interface on Primary is 192.168.55.1/24 and on secondary is 192.168.55.2/24. Can failover work normally if there is...

Hi All,I created a remote access VPN on my ASA through ASDM. The internal LAN in 192.168.14.x; the remote access pool uses 10.254.14.x; my vpn client logs in normally, but once in, i am not able to reach 192.168.14.x; any tips?