Network Security

Seeing an AIP-SSM signature (DNS Inverse Query Buffer Overflow) firing when a switch configured for sync with internet NTP server, generates a high event. While the switch is sourcing the NTP request from port 53 DNS doesn't appear to be involved. De...

Good afternoon, We have an Exchange 2003 server that is sending its logs to CS-MARS. We need to parse these logs to detect unauthorized user mailbox access. It?s easy to build this regular expression. But there are some exceptions like some users can...

Trying to establish vpn tunnel between a dynamic ip vpn device and a static ASA. Receiving the following logs...713902 Group = DefaultRAGroup, IP = 75.x.x.223, Removing peer from peer table failed, no match!713903 Group = DefaultRAGroup, IP = 75.x.x....

Hi,Actually , i installed CSA MC on a server (its name CSAMC.NMEG.Loacl), and i tried to install the CSA on a group of servers . The CSA MC and these servers are in the same domain. One of these servers (its name EG-NMEG-BACKUP.NMEG.LOCAL)is register...

HiI have a router configured with an IOS Firewall and remote access ipsec VPN.users can connect in fine, but no traffic passes through the VPN tunnel unles I do the following in the outside accesslistaccess-list 110 permit ip 192.168.195.0 0.0.0.255 ...

i am having 1 5520 with csc-ssm module. can p2p aaplications, url filtering be restriected by this? if so please help me with config.

I am trying t establish a passive ftp connection using auth ssl. The only way I get it work currently is to allow all incoming ports from the destination host to my 1 client. Is there another way to configure the pix so I do not have to open up all t...

Hi-I have a small project where I would like to install an ASA 5505 with the base license to be the head-end for 6 - 8 remote access VPN clients. The inside interface would connect to a 200+ node LAN that is behind a router. The inside network will n...

HiIn Pix 7.0 vpn configuration and when I place show crypto isakmp sa then any output comein QM_ideal state.so what is QM_ideal State ??Thanks

We have a Network on MPLS backbone with dual service provider.There are 50 spoke location.DC and DR locationTopology is hub and spoke with all sites accessing data hosted at primary DC.ALso in case of disaster all the spoke sites will connect to DR s...

I just got a asa5520 to replace my current firewall. I am having problems getting it even to work .I can 't get any traffic to pass through outbound or inbound even with the basic configs....am I missing something with this device??

I'm trying to set up a LAN-2-LAN VPN connection between two VPN 3000 concentrators...the problem is one of the sides has a dynamic IP. Is there a way to get it setup with one side using static IP and the other side using Dynamic?Thanks

Hi all,I am facing a problem trying to establish a tunnel with one of our supplier.Their side is terminated on a IOS router currently unknown type and version (should be 12.2 - 12.4), my side is an ASA 7.2(2), configurations are attached (at least th...