Network Security

When configuring a PIX 515e with latest software for active/active functionality, do I need to have my interface on the second context setup on a different VLAN(subnet)...or can I just use the same VLAN and use a unique IP?thanks

Hi everyone,I'm having an odd problem with setting up CIFS in the ASA WebVPN. It works fine with a windows share but not with a samba share. Attached are debug logs from the asa on multiple fronts: debug aaa authentication enabled at level 1debug ntd...

Hi In the PIX525 ver 7.01, show service-policy: "Inspect: http, packet 2219985030, drop 0, reset-drop 0", is packet for inbound only or for both inbound and outbound? Is it for all http traffic in the outside interface? Thanksben

Is it possible to have ip Inspect, IPS(with SSM) and QOS on the same global Policy and have them all work at the same time? It seems from what I have read I can have multiple matches to the global policy, however the ADSM doesn't seem to be able to s...

Is there a signature that detects login failures where you can set a threshold for like 3 logins failures and if this is attained, someone will be alerted?Seems pretty common, right?Thanks

About 1/2 the PCs in my company should not have the ability to browse. I want them to be able to run windows update. Google gave me lots to look at. But, I can't find a list of IPs complete enought to work. I figure someone (many someones) must ...

Hi,I have set up a site to site vpn and i have a problem where return traffic is not hitting the access-list on the return journey. The access list is confgiured with the correct range. Has anyone come across this?CheersKev

Hi friends,I have enabled capture on the IDSM data-port 1 (Gig0/7). Now, i want to use data port 2 (Gig 0/8) also to capture another segment.A snippet of my current config is as follows:ip access-list extended MATCHALLpermit ip any anyvlan access-map...

Hi,I have a 871W router that's been hanging daily for several weeks now. I think it is under a denial of service attack (I'm quite new with this security problems).I'm attaching the log, if you can help me with the diagnosis and give me some recomend...

Im about to upgrade my firewall to 3.X from 2.x and in addition add a new 6513 core switch which also has a FWSM. I want to set the 2nd 6513 FWSM in active active mode with the orginal switch.... Does anyone have a sample configuration for this? ...

HiI format my pix 535 flash. then after I enter ROMMON mode. when i upgrade MY image first I give command 'interface 1' then message come Ethernet ===port 1 could not initiallid==so i can not give ip address .now how can solve this problem .ThanksBip...

Helloi have a set up with a Cisco ASA 5520 with remote access VPN (using Cisco VPN client) and 3 different VPN group policies, each with different levels of access. the Users are authenticated using RADIUS against a Windows server 2003 Active Directo...

I have an ASA5505 with one site-to-site vpn policy to subnet "A", subnet "B" is the local subnet behind the ASA5505. I have a remote-access policy set which allows vpn client to remotely connect to the ASA5505. My desire is to allow the remote users ...

Does the PIX reset the QoS DSCP values in the IP packets through it?

Hi,Can anyone told me, how can I autmatically download the IPS 6.x Sig an SP update-s, if I didn't use CSM?Is there any solution?ThxTamas