Network Security

I was wondering if there is any form of failsafe when deplying a rulebase to a pix with the asdm. Based on the logs it seems that it simply writes the complete generated config to the pix running config. and ends with a write mem. For me who hava ab...

Dear sirs, i have cisco pix 515E with three interfaces Fastethernet0, Fastethernet1 which is built-in in the pix and Fastethernet2 which is module. i upgrade it to ver. 7.0 when i connect the firewall the fe0 and Fe1 is bring up and the light is ok b...

We have one IPVC 3545 with one MCU and one EMP module inserted on it.It is registered with one cisco IOS gatekeeper.Some Tandberg MXP770's is also registered with this gatekeeper. But when i am trying to create a video conference from the conferenc...

Hi All,I am trying to block yahoo/msn chatting on ASA. there is a provision to block both these chatting software through ASA. Can any one help me how to do that. I know via class-map & policy-map we can do it even i hav configured it. may be m doing...

I got an ASA5505 to manage a small office and I'm having problems with the ftp/VPN/remote desktopUsers from the the SOHO vpn to the Central Office to do basic taks and some times the Central Office people do remote desktop to the SOHO.The problem tha...

Hi all,I am looking for information regarding design and configuration of firewall on a Cisco 2801 router.Setup:Cisco 2801 with 2 eth. ports and 5 VLANS configured. The 2 ports connected to Cisco 2950 switches.Native vlan - 1 (some PCs and servers on...

I have an ASA with the Trend Micro CSC module, I would like to filter peer to peer file sharing traffic through the firewall but it seems less than straight forward with the csc as it wants to do http ,ftp,pop3 and smtp only. Has anyone done this w...

On NAC configuration (1751 router )i try to bypass IP Phone configuring ip phone identification with :identity profile eapoudpdevice authorize type cisco ip phone policy ip_phoneidentity policy ip_phoneaccess-group nac_ip_phone_acleou allow clientl...

I have a question about natting on the FWSM. We want to move a few servers to an outside VLAN but we also want to still be able to hit them using the old inside IP's. Here's the basic set up:interface Vlan80 nameif outside security-level 50 ip add...

We have installed a 4150 SX Cisco Intrusion Prevention System, Version 5.1(2)S240.0 sensor using vlan pairs.The problem that we are experiencing is that when the Cisco vpn client is installed on Microsoft Vista, the IPS causes the IPSec tunnel to be ...

Retiring subnet 172.16.24.x 255.255.252.0 in phases, moving devices to 172.17.24.0 255.255.252.0. Current phase - move Messaging server devices. Senior stating that currently proposed command set for move does not make sense in terms of subnet mask...

I would like to access a dmz server with both public and private ip's from the inside. I can access private with static (inside,dmz) 192.168.1.0 192.168.1.0 netmask 255.255.255.255and I can access by public with destination NAT static (dmz,inside) 64...