Network Security

I have a ASA 5510 with the CSC10 module and I also have a second 5510 without the CSC10 but with the Security Plus license. I know that I at least need to add the security plus license on the 5510 that has the CSC10 module but since the specs say li...

Hello, we want to be able to use NAC with agentless hosts. From my reading the NAC-L2-IP and NAC-L3-IP modes are the only modes that support NAH's.Are these two modes supported by The Catalyst 2960 switch?

Try to switch to the pixfirewall command line under the command environment (the dark screen). So I issue a command: en hit Return, the next prompt askes for the password: I tried the fllowing separately: cisco, cisco123 It never worked. What is the ...

I just bought a used PIX 501 and after resetting it to the factory defaults I get this message when trying to access it."Cisco PIX Device Manager encountered loading errors. If PDM has informed you about a problem in your setup, please fix the proble...

I'm going to be implementing a new pair of 5510s as replacements for our 515s. The 515s are running 7.1(2). The ASAs came with 7.0(6) but I'll be upgrading those to a release higher than our PIXs before I implement them.We use failover, remote-access...

Snort and ISS have had a signature for this since 2005. Lots of other products appear to detect this as of 2005 as well. Where is the Cisco sig? I found a default disabled/retired sig, (3718-0, Windows .ANI File DoS), but it doesn't appear to work ...

My network is very simple, like this: A DSL Modem is connected to a Cisco PIX 501 firewall/router, and a computer is connected to this firewall. Now this PIX 501 box has two interfaces: Inside (192.168.1.1) and the netwroked PC (192.168.1.2). The out...

Hi,I have a Cisco PIX 525 (v6.3(4)) that I would like to enable remote access via a IPSec VPN. That part of the config I have found on the cisco website and believe I have a solution.The PIX is configured with 3 interfaces (inside, outside & DMZ). ...

What is the best defense against stealth scans of the network? I know this is a vague and open question.How do you prevent when signature detects a single TCP packet with none of the control bits, i.e. SYN, FIN, ACK, PSH, URG or RST flags set being ...

I dont know if this is the right forum for this problem but I hope someone here can help. I have a new virus/worm spreading across my network. It will first ping random addresses in any known subnets and then try to attack port tcp 1433, tcp 2967, ...

I have config PPP multi-link with WFQ and added physical links to a multi-link group, with WFQ enabled. Physical links show queuing strategy as WFQ suspended and using FIFO.Is there a way to not suspen WFQ?thanks

Can you advise if there is some way to determine why this particular CEF process on slot 2 is running at 75% while the rest appears to be around 30%? Cairo#sho ip cef resource Hardware resource allocation status summaryGreen (Normal), Yellow (Cautio...

I am currently running a PIX 515e software version 7.1(1). I am currently using a 255.255.255.192 subnet for my public addresses for static NAT. I am running out of addresses and would like to add another block of IPs from my ISP. If they are unable...