Network Security

Hello All:This is not directly related to any Cisco product but rather a general question regarding placement of servers, open ports etc. Hopefully someone can shed some light on this for me.I understand the concept of the DMZ, to isolate those serve...

i recently upgraded my pix 515e from 6.35 to 7.22 but from then i am not able to configure failover . an error message comes on the secondary pix as VPN-3DES-AES : Disabled I believe that this feature in the pix is disabled so the failover is not wor...

I am trying to configure a pix 501 as a vpn client to connect to a VPN3000 concentrator, using a microsoft CA server. I have achieved this without any problems using the vpn3002 hardware client but I can't get the pix to authenticate and get the cert...

We are trying to setup a 2811 router to run IOS based IPS. We followed all the procedures but we can't seem to get the system to send any alerts via syslog. We have tried various port scanners with no luck. Are we missing something?

I was trying to find some design reference for the Guest-WLC and NAC integration guide. Anyone can share some experience/cisco docs/links?

Unfortunately we need to have a customer be able to access a server of ours with DCE RPC. Is there any way to have cisco CBAC to handle the UUID number of the RPC? How do you do it (besides not allowing this), do I need to purchase something else lik...

I am trying to configure the Firewall to open port 491. Appearently I am doing something incorrectly or failing to do something correctly in order to open this port. I have configured a security policy rule specifing the port and a service policy rul...

i have set up a dmz on the asa5510 with a web server in it. when i try to connect to the server from outside i see the SYN packet hit the server but the client never receives the SYN/ACK even though server definitely sends it. that made me try and ac...

Hi, during debug phase of dhcprelay on ASA 5510 version 7.0(5), we received a message with threshold of 100 not answered request, after that the dhcprelay service seems to stop to relay request to a failed dhcp server.It's true ?thanks

Hello all,I'm having a little problem getting a site to site vpn tunnel working between an 1800 IOS router and a 5520 ASA. The tunnel negotiates and comes up ok however the clients at each end are unable to communicate. Site A shows that it is receiv...

hi all,ive a CSC module attached to my ASA 5510 and if i see the service policy there is a Global policy which is default i believe, and i tried configuring SMTP for antispam service i tried adding a diff service policy for diverting the traffic thru...

Hello, i want to replace my 501 and 506 PIXs and i would like to know if there is a matrix comparison or something like that to know ASA models which correspond to PIX models.Thanks

I have a pix 515 running version 634 with four interfaces, for example, outside, inside, dmz and lab. I need to be able to connect to devices that is located on both the dmz and lab from inside. I also need to connect to devices that is located on th...

Where is the best place to put IDS/IPS device? For example, outside/inside of the Firewall?Does Cisco has any recommendation?Does anybody has good design to share with?Thanks,