Network Security

Is there any document on backing up/restoring IPS configuration? either through the IPS itself or CSM.

My problem is that the Inside and outside network defined are working fine but independently, Although from the PIX console there is response from either side but there is no response to a machine on the inside network from outside. Please someone he...

I have two 5540 ASA. I want configure A/S failover, the main unit it's ok, but the second unit stop in Cold-Standby, can anyone help me?Regards.

I am very familiar with the PIX, but new to ASA5500's. I have a company that is looking to have a DMZ with mail, and web servers. The connection to the Net is a T1.In the PIX days, I have no choice but to use a 515 with DMZ.My understanding now is th...

I was implementing site-to-site VPN on the ISR router(SecurityIOS) and the ASA 5510 firewall.what are protocol that I need to inspect on ISR router?please advices or point me to useful links.Thanks in advance

I have Cisco ASA 5520 Series and was going through the documentation of IPS. Can anyone tell me what are the basic steps for the configuration for it. Do i need a aditional device to configure this option? What is Security Service Module? Do i need t...

Hi, I am trying to setup a Cisco ASA 5510 (with plus) to act as our main firewall as well as offer us DMZ services, for webserver/SSL Concentrators (Citrix and Cisco CVPN3015). What we would like to do is a dual homed DMZ, where one link is for the i...

On ASA5520 with 7.2(2) does WRITE MEMORY command apply changes made in NAMES and/or associated outlined ACL/ACE/OBJECTGROUPS or is re-entry of any associated access-group command such as below required? If re-entry required, should NO paramenter be e...

We have a network in another state with subnet 192.168.50.0, 192.168.51.0 and 192.168.52.0.I am trying to allow them to talk to the network we setup with the ASA device.I am unable to get the 10.10.11.0 subnet to talk to the 192.168.50.0, 192.168.51....

Hi.My customer has 2 PIX 515e boxes. He has not configured any failover ip addresses. In the output of show failover, all the interfaces are in waiting state. BUT the failover is still working. It is weird because the configuration does not have any ...

I need to put a firewall device between a server load balancing (SLB) device and the real server(s). SLB uses Direct Server Return (DSR), in which case the VIP address is configured as the loopback address on the real server. Simply, the reason for t...

Anyone have suggestions on how i would engineer an architecture where i will have 2 failover pais? They will be PIX 515E's. The top firewalls will be hosting our DMZs and the outside internet of course,. and the bottom pair will be servicing our trus...

Hi,We are testing NAC L2-IP on a Cat 6506 running 12.2(18)SXF9.When configuring for NAC L2-IP, the switch is able to download the required ACL entries. The HTTP Server is enabled in the Switch, however still the HTTP redirection is Not working.From t...