Network Security

I have worked on PIX's for years and still have a hard as hell time understanding ACL's on a pix, specifically the direction to apply and how they are inspected.If you read the books it always says inbound acl's are used to go from a lower to higher ...

I found on the cisco source but I don't see the image for IDMS-2 version 4. If I update fail, I want to reimage to version 4. How can I find the image for IDSM-2?

Hi all, I use Catalyst 6513 (Router IOS) + IDSM-2 and use Cisco VMS 2.3 to manage IDSM-2. I upgrade IDSM-2 from version 4 to version 5. However, after updating completely, I use Cisco VMS 2.3 to query to IDSM-2, I see a error: "status: Error importin...

Hello all,I have an ASA5510 running 7.2 and asdm 5.2.I am trying to setup a Web server on the DMZ. I need it to be able to communicate with an internal mail server. I followed the example in the getting started guide, but am running into a problem....

Hi,I am after deploying an IDSM on a 6500 SW which already has FWSM module. I want to monitor VLANs which are already protected by the FWSM; so I have some questions:1- How would I be able to span or configure VACL for VLANs which are behind the FWSM...

I would like my IDSM-2 to run in a Promiscuous Mode ( and not INLINE mode)How can i configure it so that it works on the - " Block Nothing,Monitor Everything" principle.I need the blade to "Never" block the upstream devices like routers and Firewall...

I'm looking into configuring an asa5510 with a dsl modem connected to it's outside interface and a bunch of pc's connected to the internal interface through a 3560 switch.the internal network will be a 172.16.x.x network with /24.if I did not want an...

I have a strange problem I hope someone might just know the answer to, before I start with TAC. I have an inbound static NAT for a web server on the inside network of a corporate office. It's a test server for a small internet startup. The outside...

I have a ASA 5510 configured for SSL Web VPN.I need to add Microsoft terminal service web client (TSweb) as a link in the Web VPN portal.I can use the normal MS remote desktop client with 127.0.0.1:xxx but the non technical users are having hard time...

The network is setup as described below:Site 1:DSL ModemPIX 506 (Handles PPPoE Authentication)Cisco 2620 with T1 to site 2Site2:Cisco Cable ModemPIX 506 (Gets DHCP address through cable modem)Cisco 2620 with T1 to site 1I have the network setup route...

Im looking to have my VPN server in my DMZ. I have seen two topologies for doing this.One is where the VPN server has a second NIC connected to the internal lan.The other is where the VPN server routes packets through the firewall. I udnerstand this ...

I am looking for a little bit of guidance. What I am trying to do is extend my office network to a few remote employees working out of their homes. We have a 2821 ISR as our main office router, which is handling our Internet routing, firewall, and ...

Has anyone an event whose source is 0.0.0.0 generated by an CSA 5.1?Thank in advance and Merry Christmas, Cristina

Hello,I'm trying to find out more information on which option is better for me... Should I place the FWSM Blade behind or in front of the MSFC? If I have a typical Data Center with several Web servers which then need to talk to the Application serve...