Network Security

I know the resets are done by the sensor, not the PIX or router.Is it possible if my IDS 4235 is working in passvie mode not inline to reset tcp sessions..? If yes than please explain how it does..

Hi Expertsi need a cases study regarding pix configuration with various requirment10xs

I have two networks currently. Network A & B. Network A is a remote location where users connect to B through VPN. Once they establish a tunnel they rdp a terminal server. On this terminal server there are several printers installed. These prin...

Hello,Can a pair of ASA firewalls be deployed as an Active-Active or load balancing solution?

Hi i have finally managed to get into my PIX Firewall although i can only seem to telnet into it. I have to do some networking changes regarding our internal networks. Currently my PIX uses three external IP Addresses and translates them into addre...

Hi,has anybody tried to implement a NAT exemption and static NAT for the same source. What i want to achieve is that one host of the internal network will be not natted like the complete network and also has a static NAT for another connection.I have...

All-I am in a lab environment working on a project that, among others, includes Cisco's NAC product.We are responsible for providing basic network services, such as DHCP, WSUS, Anti-virus and Certificate Services. We have completely loaded and teste...

I have a 1841 router that is going to be an Internet facing router for a DR site.Normal operation is to have the main site VPN tunnel to the remote site.An IOS firewall policy blocking all access but throught the VPN tunnelIf the main site were to ha...

We had a firewall failure over the weekend which crippled a remote site. We have a VPN concentrator at another main site and we were wondering if we could use this for a "backup" tunnel for the remote site (the primary line is a tunnel to a separate ...

Hi everybody, i'm try to configure a pix 515. It has 5 eth ports. One of these is connected to our public ip, one other connected to out intranet. And that's ok we can use internet without problem.The problem rise when I configure one other port wit...

Well, we are using IDS 4235 off line with mirrored ports and executing acl on external router..I want to build a custom signature which will reset the tcp syn sessions if more than 10 or 12 from a single IP...can someone comment how it's gonna be wit...

Not something I've attempted before so perhaps somebody can shed some light.Have a PIX configured with static inside translations, so servers appear with a fixed IP address on external subnet.In addition to this I want to add a static outside transla...

Hi,I made the following test:One machine using VLAN2 with the ip address 1.1.1.1. The FWSM inside interface is using 1.1.1.2. The VLAN2is associated with the Firewall Module.If I create a loopback for management in the 6500 switch, for example 1.1.1....