Network Security

We are trying to view the IDSM messages through IPS event viewer 5.2 but was not able to get viewed in the event viewer. We are able to see the traffic in IDM but not in the viewer. Other than adding the device in the IPS event viewer, do we have to ...

How do you modify an ACE whose line numbers don't increment because they are a part of the same object-group expansion?

Is there an easy way to view who (by IP or Netbios name) is sending and receiving traffic in and out of the PIX?? Like over the PDM perhaps or some other way that is easy to decipher??I see at times where the traffic on the interfaces spikes and I wo...

I want to configure active/active on pix 525 having version 7.2. currently these 2 devices are configured without any failover mode. I have 2 ISP, isp1 & isp2 . I want any outbound traffic will go via these 2 isp'2 in a load balancing method. means 1...

Hello guys,Would it be possible to deploy Cisco ASA like Cisco VPN 3000 which connecting only one interface to DMZ interface of the firewall? I?d like to use it for remote access IPSec VPN. I?m looking for any documents regarding this configuration b...

I am using a route-map to change the ip-next hop of some traffic at (cisco 4000 router). I try to configure the same route map on ASA 5520 but the command "set ip next-hop" not accepted. Is there any alternative solution.

HI All, we have just bought two Cisco ASA's that I have setup in a failover pair, Having some issues with the Access Lists however.I have created an access-list that permits any source to access a web server on the DMZ (Using NAT) However when I brow...

Hi,Is NAC supported on the Catalyst 6500s with Sup2/MSFC2?Thanks,MRD

i have an ASA 5500 firewall and i need to ping from hosts in inside interface to outside interface

We are experiencing an issue where once or twice a month our DSL connection takes a hit, and then the ASA5505 device will not function. In the past the only way to resolve this has been to shut the device down and then bring it back up about 10 minut...

Does the below config allow (just from a NAT perspective)hosts on the 10.1.1.0 subnet to access servers on the 192.168.1.0 subnet?It this NATing the FTP interface to the 10.1.1.10 address?if so, would this over rule any access-list that was applied i...

Hi folks.I'm doing an WebVPN pilot on one of our ASA's (running 7.2.2). Everything is working fine, but I've been asked to restrict access to users that are members of a certain Active Directory group (lets call the group "VPNTEST")Right now the ASA ...

We have ASA 5510 with standard port use: Inside, DMZ and outside(T1). Leaving Eth0/3 unused. We are considering getting DSL for a redundant Internet connection, could we use Eth 0/3 somehow for failover?Or is this better suited for a different device...