Network Security

I just recently changed the IP pool for my VPN clients from class B to a class C.I assinged 192.168.1.1-253 for the range.I have a VPN client who is wireless and his netgear assigns him 192.168.1.2. He can validate on the VPN but cannot resolve names...

I'm getting some alarms for signatures that I think are a bit too sensitive -- 3051, for example. It makes sense to me to adjust the Minhits or AlarmInterval to make the signature less sensitive, increasing the level of activity before an alarm occcu...

Ok, I am trying to have an FTP server (eFTP if it matters) in my web dmz. Basically have the server with a private performing NAT to a public address, no big deal, I have enabled the appropriate port for forwarding (21) - and I can set what other por...

Hi all, Could you please tell me if I can log url pages visited in inbound and outbound connection through Cisco Asa?I tried with logging trap debugging but i see only layer3/4 information.Thanks!Marco

Hi,My firewall is PIX 525 with IOS version 7.2. Is it possible to use trendmicro IWSS as URLfilter instead of N2H2 or Web sense.Thanks,siva

Well, this is my first Pix experience, and after reading through the doc, I am still with some questions.In the network diagram I send you, have the pix outside interface (to DMZ) to be announced in a public DNS for me to have access to the internet,...

I'm trying to figure out how to select signatures. I suppose one could just watch the alert chatter and disable or delete signatures that seem too noisy. Doesn't seem very secure. I'd prefer to analyse the traffic that's triggering them, but if I onl...

We have a client using an IWATSU phone systems with IP cards int it. The clients config is like this; (Remote Site) Phone Switch | Ethernet Switch | Cisco 2811 (VPN Tunnel) | INTERNET | Cisco 2821 | Cisco ASA 5540 (VPN Tunnel), (NO IDS inspection on ...

I see that version 4.2.6 was released today. I am unable to find any release notes as of yet. Anyone else see them, or am I missing something.With past history, I don't think I will be applying any upgrades without at least being able to see what Cis...

I have a temporary situation where I need to allow traffic where both tx and rx do not take the same path.Sometimes the originating traffic will go through the ASA, and sometime the return traffic will go through the ASA.Please don't tell me that I n...

If you run an ASA5505 in transparent mode, will a 10-user license restrict the firewall in any way?

How many concurrent h323 calls ASA5510-BUN-K9 can handle and the cps setup rate to make sure it does not impede the voice service during operation.

I like the ability to view and filter logs, with colour coding, in ASDM. Does anyone know of a similar (hopefully free) product which would do the same but allow you to load saved logs?Rather than configure syslogs I prefer to ftp the internal log bu...

Hi all !!!I'm using 6509 FWSM and wanted to know the command to monitor the port based violation (which are the unnecessary ips and port are trying to access certain interface).thks in advanced,regards,aryan

Hi,I have a pix 515E Unlimited that run on version 7.2. Customers connect to it via Cisco VPN Client. I have run into a problem that there is a limit of 15 radius groups in the OS.Does anyone know if it is possible to upgrade the license or in any ot...