Network Security

We run a PIX 515 with version 6.1(4) and with 3 interfaces(outside,inside,dmz)Recently we have been experiencing problems with the odd person not being able to connect to the internet (our proxy server sits in the DMZ). When I try and ping any of our...

I have a Cisco 3600 series router that serves as a vpn gateway for multiple ipsec tunnel. It's outside interface (F0/0) is where the peer vpn's terminate and it is where the crypto map is applied. I'm having an issue with a recent vpn peer addition. ...

Can the IDS catch zero-day attacks and report on them?Thanks

Does anyone know if using NAC L2 802.1x supports authenticating all clients on one port? Or is it similar Cisco's standard 802.1x support where after one device authenticates on a port, all are allowed access?Thanks for the help. I can't seem to fi...

We currently have a PIX 515 with 4 ports. One port connects to our Internet and the other to our internal network. We run a NAT pool on the outside interface to translate our inside addresses to the outside. We have a requirement to connect to a v...

I have a pix 515 and it is managed through ASDM. My current configuration is very basic. One ouside interface and one inside interface (working in transparent mode). I haaving problems setting up my security policies (rules) to allow outside traff...

Using VMS/IPS MC to add an event action filter. IPS MC requires an victim address in the event action filter, however the alert in Security Monitor has "<na>" as the victim address.I tried "0.0.0.0 255.255.255.255", which caught the alerts that had...

I know that Security Manager is the successor to VMS, but I'm currently still using VMS. Does VMS support the IPS module for the ASA appliance?

I'm getting a Broadcast probe request flood error for a signature attack on my wireless controller. I have a mac address and the AP name but I'm not sure what to look for. I'm new to this wireless world. Is this someone trying to logon? Thank you.

hi guys, I have 2 interfaces on this PIX that are alive, an inside interface, and an outside interfaceoutside 200.200.200.10inside 192.168.120.0I can't seem to access anything outside.Global shows:global (outside) 1 200.200.200.10Nat shows:nat (insid...

Hi allz...I have an application which retrives data from a couple of servers on the internet. It needs some ports to do this such as 2000,2001,2002.And I want that users who use this application in the LAN never surf on the net? They need only one we...

So I have some internal application that is apparently issuing a PORT command with out authenticating first, causing this sig to fire. I'm trying to decide whether I care (does this have security implications or is this just another stupid app).What...

Hi,Ive recently started to work on a site which has a pair of ASA5540. Im used to working with Juniper boxes can anyone point me in the direction of some good documentation/books on the configuration of the ASA devices.Thanks

I want to use an open source IDS for my small network. I have a Pix 501 and I would like to span one of the ports from the integrated four port switch so my IDS can see all the traffic. Is this possible or is the integrated switch too basic? I have a...