Network Security

Right now most of the rules I am creating are drop rules while doing the initial tuning of my MARS box. When I use the query to save as a rule, it apprears that you can only save it as an inspection rule and never as a drop rule. Am I missing somethi...

1599 10/19/2006 15:27:36.790 SEV=5 IKE/231 RPT=8 210.x.x.x Group [210.x.x.x] Could not find centry for IPSec SA delete messageHi after a document which will allow me to decifer and understand VPN concentrator messages like the above.ThanksSimon

I am configuring a site to site VPN with a Cisco ASA 5510 on each side. Site A and site B each have several local router hops. We currently run Rip v2 at each site. Is it possible to forward Rip broadcasts through the VPN or is it time to look at ado...

The SVR is on VL60, the PC is on VL80. So, PC(.25--VL81--GE0/7--VL80--SVI 80--SVI60--VL60--SVR(.10)Sensor interface GigabitEthernet0/7 is assigned to trunk all Vlans 1-4094CAT65K-PODX#sh ru | in intrusionintrusion-detection module 6 management-port a...

Hello, I know that ASA can support dual ISP configuration using the track option in the new version. My issue is that I will terminate both ISPs to different interfaces on the ASA however, I will use the track option. My problem is with the Static NA...

My entire network access everything on the outside using Nat0. Is it possible to have the entire network acces a single outside destination address via a nat'd address?So, if I'm going anywhere on the outside I don't get address translated but if I'm...

Hi All,I have at work a Pix 515E utilizing s/w 6.3(4) - all 6 physical interfaces are in use.I need to use the vlan support that the pix provides. What I want to know is whether I will lose any of the pix current config associated with the interface ...

Hi,I have Cisco 877W ADSL router installed in front of Cisco ASA 5510, this router terminate Remote Access IPSec VPN tunnels. The PIX does not do NAT since the router do that.I can access the management IP address through inside, but when i connect u...

Hi,I would like to understand how pix do the firewalling, ie. a Packet from inside go to outside (webserver), the nat and global are done and there is an outbound filter for inside allowing http.Which will be process in the pix, first look for ACLs i...

Hello,I have the current following config:Internal Lan >> Cisco 2660 Router >> InternetRight now the 2600 is configured for NAT and everything isworking great. We also have 1 Exchange 2003 server on our internalLan which is also working fine.I am pla...

Hi,I have a Cisco ASA 5510 and couple of webservers behind it. For some specific applications, those webservers call the website hosted on the same box. The appliance sees that as a Land Attack and gives the following error:Deny IP due to Land Attack...

I'm planning a small VPN network with about 20 remote Windows XP clients. These machines will be unattended, and I need them to automatically establish and maintain the VPN connection. I have not used the Cisco VPN Client before, so I am very curious...

I am doing QA on an IOS and I need to verify the following:http://www.cisco.com/en/US/products/products_security_advisory09186a008055ef31.shtmlAny help will be appreciated.Tey