Network Security

I have a client who does not want to useAAA/LDAP to control user authentication andis fine with using local database authentication.They would like to migrate off of a VPN3030which has a maximum of 500 user entriestoday (and they would like more).So,...

Hi,Can somebody tell me how to downgrade the FWSM module on CAT 6500 from 3.1 to 2.3 version?RegardsSebastian

Dear Pros,Project explanation: Pair of pix firewall configured as failover.The outside of the pix pair connected to the internet gateway router 3825.Inside of the pix pair connected to the core switch ports configured with the vlan.The configuration ...

1a. Trying to redirect an external ip to a DNS name/alias.1b. Redirect a external DNS name/Alias to a internal DNS name/Alias.2. Trying to do port forwarding from one public IP (with various ports) to many internal IPs.2a. Ports 80,81,82,83If they ar...

I have an extended ACE configured on a PIX Firewall. The purpose of the Firewall is a choke point coming off of the customer's DMZ into the Production networks.There are a couple of hosts on networks inside of the Firewall that hosts in the DMZ need ...

How do I set up a report in MARS when I look at the top destination ports I want to drill down even further to see what address are accessing those top ports? I am new to the box so I am still learning the features.

Hi,I am in the process of building a pix 515e to replace my 506e. Below is part of the current 506 configuration. conduit permit tcp host xxx.xxx.xxx.xxx eq ssh anyconduit permit udp host xxx.xxx.xxx.xxx host xxx.xxx.xxx.xxx eq syslogconduit permit i...

Are there any plans to develop a PPLive signature from Cisco? Thanks.

Hi Everyone,I have a web server that resides on my DMZ that needs to communicate bi-directionally with a couple of servers on my internal LAN. I have set up the NAT and ACLs but I am still not able to get communications working. Would somebody please...

Hii have a 2600 router with a pix and Acs 3.2;now i need to configure the PIX To support VPN(outside User dial into the Network & get authentication from the Acs.hoe do i achive that10xs

dear all,when i update my signature IPS to S258, i get a lot of "cisco VPN 3000 concentrator HTTP attack vulnerability" with high severity from my event viewer dashboard, is it true or false positive because we dont implement cisco vpn concentrator

Greetings all. I have a Cisco ASA 5510 device running software version 7.1(2), Device Manager version 5.1(2). I have a IDS/IPS security services module (ASA-SSM-10) installed in the ASA. - Management of the ASA and IDS/IPS SSM is done via the CLI.- I...

Hi,Iam very new to cisco pix,which model of pix will provide me a good solution implement the following.1.Natting.2.Failover 3.Implementing squid based thing in pix4.VPN so that emplyoess can connect to vpn and access the internal networks.Can any on...

I have an ASA 5520, and I need to take all traffic from one external IP, and move it to an internal IP, except SMTP, which i need to forward to a different Internal IP. For example, I have nat set so that 64.64.64.64 external NATs to 10.10.10.10, but...

Hi, I'm configuring ips con my cisco router.There are several options that I really interested in activating, but I'm not sure this activation will provocate connection problems...these are the options:Ip->Tcp Anomalies->-frag null packet-null packet...