Network Security

I have an access list that blocks the first part of a network outbound. This should block networks 1 thru 31. I am trying to replicate this line for an additional network but receive the message ERROR: IP address,mask <172.17.0.0,255.240.0.0> doesn't...

Hey, While working on tunning an IPS 4240 for one of my customers, he told me he'd heard of a Best Practices document on tunning the IPS. More on how to tune the appliance, the document talks about which signatures should be enabled, and the best act...

Hi,A customer has 2 sites connected with IPSEC VPN. The Firewall are PIX 506 (6.3.5) and PIX 515 with v7 OS.More over he has VPN clients that can connect on both sites.The question is, is it possible for a VPN Client that is connected on SITE A, to a...

I want to forward pings on my outside ip address to an internal server. Is this possible?

Hi,I have a problem with a Windows XP station with SP2 in the NAC DOT1X environment. I've already installed the SYMANTEC ADF file in ACS with success.After I've installed the SYMANTEC client v. 10.1.0.394 in the XP station, it don't put any file and ...

Hello all,I was wondering where I could find the PIX 501 documentation for version 6.3(4) of the firmware. I have the 7.0 firmware documentation and a lot of the commands aren't working like they say they do in the documentation.In particular I need ...

HiI am using before 4215 IDS in my network.My question is what is basic difference IDS and IPS ?. why I am using IPS in place of IDS , what is the key point and benefit ?.Thanksbiplob

I was wondering if there is a suggestion on the following issue:On a Cisco ASA I have configured third interface (other than inside,outside) to be used for VPN traffic.There is no problem with L2L tunnels since the remote IP is known, so it is easy t...

I am implementing a network with an ASA 5520 and an ISA server. I would like to hear input from people who might have done this before as to what the best setup would be for this? Having two firewalls would enable a layer of protection behind the per...

So I finally got my 506 up and running. I have internet access and inbound requests are being directed to the correct servers (smtp, http etcI have noticed many have ip verify reverse-path enabled. Is this a function one would normally enable as a 'b...

What is the processor/processors in the ASA 5540?

I am in the process of configuring my ASA5505. I have the Security+ license. I am finding that I have no choice but to use VLANS and then switchport my E0/* interfaces. Is this true or can I somehow get around this setup and assign IPs and Names to E...

Hi Experts,We have 2 ISP's consider SP-A and SP-B. Both are connected to Router. We have default routes on Router to SP-A and SP-B. Router is connected to PIX. Patting has been performed for both the ISP's. Now I need some redundancy on PIX so that S...