Network Security

hello,am i right in saying;1. if ips is in ips mode, then i have to use interface pair?1. if we have interface pair, does this 2 interfaces has to be in different subnets?thanks

I have recently started work for a new company and have taken over the ASA 5510 Firewall rules. I have worked with them a bit in the past, but not enough to say I am very strong or a master.Anyway, after taking a look at the firewall rules, I was hor...

We are migrating to a CISCO ASA firewall. We have multiple websites hosted on a single webserver. The webservers default gateway points to the old firewall and we don't want to change all websites at once. We've attempted setting up a test website. W...

Hi,Pls see the attached network diagram.We have recently bought 2 ASA's model 5520. The first ASA is connected to the internet by a 2800 series router. The first ASA has got 2 DMZ and each DMZ has 2 servers.The servers are our application servers and...

There is someone trying to get access to my FTP server causing slowdowns and event log errors. I have added his IP to my access list deny to that server and he is still able to access the server. What did I do wrong if anything?access-list joe deny...

Anybody attempted to migrate CSAMC4.5 to new 5.2 on diff machines? I'm going through the install doc for this process, I'm at the step where I run prepare_45_migration.exe on my 4.5 server. I've disabled CSA on 4.5 server, and the exe looks to run ...

Hi,here's the scenario ... I need to upgrade a remote site router's IOS code using TFTP. The remote site router has a VPN tunnel connecting to a central firewall ASA 5520. The TFTP server is located on the inside interface of the firewall. There is n...

Hi I am planning to upgrade our 515E to 7.x code. Which is the most stable version available for PIX 515E?Do I need an Activation key after upgrade?ThanksSyed

On a pix 515e ver. 7.0, I've set security levels between the inside and the dmz to 100. Is there anything else I should consider to allow unrestricted access between these two interfaces, I'm experiencing traffic delays from inside to dmz but not fro...

Aftre applying ingress filter on border router, ASA cpu consumption has soared to 90% and holds there all day.Simple ingress acl to block "private" network addresses, icmp, and snmp traffic.Syslog does not show anything out of the ordinary. How can I...

Hi I need to put a web server in the dmz that accesses our SQL db in the local lan. What do I need to do to get this done. Thanks

I have a question about the concurrent connections on the FWSM.yesterday,our FWSM is down beacues too many of concurrent connections.so we reset the FWSM.before that we check the number of concurrent connections is 19765160 !!!But the capacities of t...

Has anyone created any signatures for Cisco IDS sensors to detect things like Social Security Numbers, Credit Card numbers and other confidential information leaving the network? Obviously it would only be in unencrypted protocols but it seems like i...

hello,how is ips signatures updated?thanks.

HelloI?ve got a pix appliance that was used by the students in our company. Unfortunately now I can?t connect to it via the console port. No mather what I press there is nothing showing on the console.Please, let me know if there is any command by wh...