Network Security

Hello,must we use AIP-SSM (IPS) module to block replay attacks on an ASA appliances ?

Hi,I have PIX 515E implemented in my network,there 200 lan users are there ,out of them 10 users are SAP users,they used to access the SAPserver.com site very frequently,I want to allow them to access only the SAPservers.com,I do not want to allow th...

Hi allI have been testing to backup and restore the ASA 5505 using TFTP server, but it seems not to work.OK at the moment we have ASA 5505 and everything works fine so I issued "copy flash tftp" then I provided 3 files one at a time i.e. asa722-k8.bi...

Hi,I have noticed the memory usage on ASA5520Free memory: 280895728 bytes (52%)Used memory: 255975184 bytes (48%)How can i check what proccess loads the memory on ASA?thanksLeo

Hi,Recently I've started getting the an alert re: the number of connections to the Pix. The OID is: cfwConnectionsStatVal .1.3.6.1.4.1.9.9.147.1.2.2.2.1.5 I know the threshold set is not that high but the interesting thing is that, if anything, this ...

Kind of driving me crazy, I cant http, ssh, asdm, anything to it! Im specifically trying to get to it from 65.115.10.x.

I've a PIX-515 firewall, running 7.2.2, in front of a private network. Servers in the private network are statically mapped to the external interface like this:static (inside,outside) tcp host-outside www host-inside 8080 netmask 255.255.255.255The p...

Hello, I have setup SSL VPN on ASA. Users are authenticated using a Radius server (Not Cisco ACS). I need to know how to assign certain users to one policy and other users to another policy. Currently all the user get the same Webpolicy but I would l...

I am using a VPN server which needs to proxy-arp for private interface traffic to assigned client pools. This is necessitated by the clustered aspect of the VPN service.I'm concerned that this will load my FWSM's arp table. The host 6509 has amaximum...

I've been trying to work around a problem that has been driving me nuts for a long time. As far as I can tell IP INSPECT on 871's and 1811's (models I've tested) using a range of IOS versions from 12.3.8 to 12.4.11t can not handle sending traffic ove...

Can qos pre-classify be enable over an IPSec VPN running from a 3825 ISR router to a VPN concentrator? I know it will work over GRE and IPSec site-to-site VPN's where the termination point is a router but I'm not sure about the concentrator. Any thou...

platform descriptionFWSM Firewall Version 3.1(4)0 <context>Device Manager Version 5.2(1)FI can not figure out how to delete a Global Object (ip address).I can add and modify...But in the two different Global Object interfaceswhen you are in the Secur...

we are using ASA5505 having two interfaces inside(Security level 100) outside (security level 50)We had statically natted I.P X.X.X.X (inside ) to Y.Y.Y.Y (Public I.P).We are able to ping this public I.P from Internet ,also nat is working successfull...