Network Security

I'm going to be implementing a new pair of 5510s as replacements for our 515s. The 515s are running 7.1(2). The ASAs came with 7.0(6) but I'll be upgrading those to a release higher than our PIXs before I implement them.We use failover, remote-access...

Snort and ISS have had a signature for this since 2005. Lots of other products appear to detect this as of 2005 as well. Where is the Cisco sig? I found a default disabled/retired sig, (3718-0, Windows .ANI File DoS), but it doesn't appear to work ...

My network is very simple, like this: A DSL Modem is connected to a Cisco PIX 501 firewall/router, and a computer is connected to this firewall. Now this PIX 501 box has two interfaces: Inside (192.168.1.1) and the netwroked PC (192.168.1.2). The out...

Hi,I have a Cisco PIX 525 (v6.3(4)) that I would like to enable remote access via a IPSec VPN. That part of the config I have found on the cisco website and believe I have a solution.The PIX is configured with 3 interfaces (inside, outside & DMZ). ...

What is the best defense against stealth scans of the network? I know this is a vague and open question.How do you prevent when signature detects a single TCP packet with none of the control bits, i.e. SYN, FIN, ACK, PSH, URG or RST flags set being ...

I dont know if this is the right forum for this problem but I hope someone here can help. I have a new virus/worm spreading across my network. It will first ping random addresses in any known subnets and then try to attack port tcp 1433, tcp 2967, ...

I have config PPP multi-link with WFQ and added physical links to a multi-link group, with WFQ enabled. Physical links show queuing strategy as WFQ suspended and using FIFO.Is there a way to not suspen WFQ?thanks

Can you advise if there is some way to determine why this particular CEF process on slot 2 is running at 75% while the rest appears to be around 30%? Cairo#sho ip cef resource Hardware resource allocation status summaryGreen (Normal), Yellow (Cautio...

I am currently running a PIX 515e software version 7.1(1). I am currently using a 255.255.255.192 subnet for my public addresses for static NAT. I am running out of addresses and would like to add another block of IPs from my ISP. If they are unable...

Hello, i have a customer that has a CW LMS 2.6 managing more than 1000 equipments.He has enormous databases and the service level is very degraded.Is there any thing to do with the database to purge them or to depurate them????Thank you on advanced.

Hello-I have a 3000 series Concentrator. I am trying to set up a new Lan-to-Lan. The IKE Proposal I need to use will not show up in the drop down box in Configuration\Tunneling and Security\IPSec\LAN-to-LAN, all the rest of them do. If I go into C...

Hi,Anyone can help me to get the link for the ASA Active/Actice config example?I only see in CCO the Active/Standy Example with config and network diagram notes.Appreciate if anyone can send me a link.Many thanks, the config guides for ADSM 5.2. and ...