Network Security

About 1/2 the PCs in my company should not have the ability to browse. I want them to be able to run windows update. Google gave me lots to look at. But, I can't find a list of IPs complete enought to work. I figure someone (many someones) must have ...

Hi,I have set up a site to site vpn and i have a problem where return traffic is not hitting the access-list on the return journey. The access list is confgiured with the correct range. Has anyone come across this?CheersKev

Hi friends,I have enabled capture on the IDSM data-port 1 (Gig0/7). Now, i want to use data port 2 (Gig 0/8) also to capture another segment.A snippet of my current config is as follows:ip access-list extended MATCHALLpermit ip any anyvlan access-map...

Hi,I have a 871W router that's been hanging daily for several weeks now. I think it is under a denial of service attack (I'm quite new with this security problems).I'm attaching the log, if you can help me with the diagnosis and give me some recomend...

Im about to upgrade my firewall to 3.X from 2.x and in addition add a new 6513 core switch which also has a FWSM. I want to set the 2nd 6513 FWSM in active active mode with the orginal switch.... Does anyone have a sample configuration for this? I ha...

HiI format my pix 535 flash. then after I enter ROMMON mode. when i upgrade MY image first I give command 'interface 1' then message come Ethernet ===port 1 could not initiallid==so i can not give ip address .now how can solve this problem .ThanksBip...

Helloi have a set up with a Cisco ASA 5520 with remote access VPN (using Cisco VPN client) and 3 different VPN group policies, each with different levels of access. the Users are authenticated using RADIUS against a Windows server 2003 Active Directo...

I have an ASA5505 with one site-to-site vpn policy to subnet "A", subnet "B" is the local subnet behind the ASA5505. I have a remote-access policy set which allows vpn client to remotely connect to the ASA5505. My desire is to allow the remote users ...

Does the PIX reset the QoS DSCP values in the IP packets through it?

Hi,Can anyone told me, how can I autmatically download the IPS 6.x Sig an SP update-s, if I didn't use CSM?Is there any solution?ThxTamas

Cisco released S284 and S285 this week, but for IOS IPS in Mainline and T-Train Releases prior to 12.4(11)T, there are no updates on CCO. Has signature update support for prior to 12.4(11)T stopped? Did I miss an End of Life notice? If not, how long ...

HiI have pix 535 with failover os 7.0.When I am connect the firewall to network some of days it changes Active to passive. now last two days primary router auto reboot. when Primary router reboot then time failover ruter active and after some of hour...

Just got a new ASA 5510 and I am having a hard time letting any trafic through. I can ping the outside interface xxx.xxx.xxx.xxx but none of the ports are open.Ethernet0/0 outside xxx.xxx.xxx.xxxEthernet0/1 inside 10.10.10.10The nic on my iis server ...

Hi, Kindly Indicate for below scenario, Static necessary or not for Inbound Conncetion If I need to hide my Internal IP Address to Outisde Users.I am not able to access my Inside Server. nameif ethernet0 outside security0 nameif ethernet1 inside secu...

I have got 2 no's of asa 5520 one gest hanged in around 40 minutes and the other does not boot up, the LED for the poser does not come up, led for the flash is amber and the, vpn amber pleas let me know what could be the problem.thanks