Network Security

We're getting alarms with Victim address = n/a and attacker/victim port = n/a for this signature. We've tried to change the Event count key to "Attacker and victim addresses" and/or "Attacker and victim addresses and ports" but there are still alot o...

Network readdress project requires PIX changes. We provide internet access for company w/in our campus (3rd party connect). Currently 3rd party is config'd as "DMZ" on PIX 525.We provide "network management" to the 3rd party by helping their admin ...

My network is very simple, like this: A DSL Modem is connected to a Cisco PIX 501 firewall/router, and a computer is connected to this firewall. Now this PIX 501 box has two interfaces: Inside (192.168.1.1) and the netwroked PC (192.168.1.2). The out...

I have two ASA 5520's with SSM-10 modules configured in active/standby failover mode running 7.2(1). The IPS policy on the ASA is configured for IPS inline and permit traffic if the module fails. The ASA Criteia tab has the number of interfaces the t...

Does anyone know of a way to block Skype and any other VoIP services with an ASA? I would assume a regexp recipe is in order because I don't see any built-in policies in the ASA. However, with each additional Skype version, it seems they change how...

I have added our Pix 515 Firewall to our Cisco Security Manager console. The Pix adds without issue, however if do not see our Remote Access VPN listed under the remote access VPN tab. If I preview the configuration and compare it to my running con...

I'm having an issue with the CSC options not showing up in ASDM even though the module shows as installed and up in the command line, any ideas?Aaron

Hi all,I have some more question about HW and PIX failover.What happens when I connect two PIXs..one UR license and one FO license and my FO PIX takes activity over and my PIX with UR license will be corrupted so that I will need to disconnect it com...

isakmp is working.fase 2,Ipsec does not work:IPSEC(validate_proposal): transform proposal (prot 3, trans 3, hmac_alg 1) not supported

I have a brand new configuration. I made the fewest possible modifications for testing. Here are the only changes I made:Added an IP (+mask) to the outside and inside interface.Added a nat (inside) 0 0Added a global (outside) PUBLIC_IPAdded a defau...

Again, Pix 506 5.2(6):To this point I will need to manually enter my DENY access-list statements on my 506 as we do not currently utilize any type of IDS.In my initial config, I had 1 DENY rule, followed by 5 PERMIT rules and then of course bound to ...