Network Security

tengo un pix 515e, un servidor que esta en la dmz no puede tener conexiones hacia internet por conexion segura que es por https o puerto 443, ya le asigne el nat statico y supuestamente si debe de hacer conexiones sin problema, pero, solo por http si...

I have attached topology . I am installing new firewall , and I am having vpn tunnels coming over to 2621 routers . I want to move away couple of tunnels to firewall.But i dont want to nat tunnel traffic , also I want to configure firewall such as tu...

After my IDSM-2 crashed, I got a dump and noticed the following error:13Sep2006 15:35:11.250 2.010 sensorApp[13544] sensorApp/W errWarning Producer appears to be out of superblocks...consider configuring TCPReassemblyMode to loose FreeBlocks: 9Can an...

i have an interface on one of my dmz interfaces with ip address 172.27.127.1/24 to a LAN with networks 172.27.127.0/24 and 172.27.124.0/24...how do i reach the 172.27.124 network through this interface through the PIX dmz int ,can it accept a seconda...

Can anybody help, I can't get my sniffing interface to work. I can manually set it by doing the ifconfig xxx up, but it won't remain and does not seem the to be the right solution. I have the following error below, any help is appreciated.Modify syst...

I have a Cisco 4215 IDS sensor running 5.1-3 I am trying monitor events using Ciscoworks VPN/Security Monitoring Solution but I get a connection status of indeterminate under the Monitoring Center, Security Monitor, Monitor, Connections. I have 29 ...

I would appreciate a lot if I can get this solution along with CISCO Hardwares.The managing team explains the application as aloosely coupled application for this cluster. As youbetter know, these kinds of applications, generally,do not need an inter...

Hi, I'm sending a multicast stream from a pix dmz. I have no problem to receive the stream from more secure interfaces, but i can't receive it from less secure ones.I have enabled multicast-routingI have reviwed the syslog (there are no errors)I have...

I ran into a horror case yesterday when I was trying to setup failover with my PIX 515E (with 7.21 code). Details is as follows:Existing PIX 515E (the only active one)interface Ethernet5 description LAN/STATE Failover Interface speed 100 duplex fullN...

I am trying to enable int1 so it can send TCP resets. When I attempt to enable it, I get the following error:"Error: This operation is illegal because interface, int1, does not belong to an interface group."I have a group set up that contains the sen...

HiI'm thinking of purchasing a ASA 5520. The spec says it supports 25 vlans. Now I'm not sure what this means. I currently use 21 vlans across the network for various purposes some. Five of these are used for DMZ areas, which I have created using teh...

We are having some interesting and sometimes painful activity with all of our csmars devices. If you are working in the csmars web interface, then go away for a little bit to work on something else and come back to csmars, the next screen you try to...

I have a cisco client vpn, the connection is established but I can't ping or telnet the server ( or the router ) in the other side.

Hi all,We've added three devices to mars...trying to get familiar before populating it with everything.Each one logs this: Inactive CS-MARS reporting device on an hourly basis. One device is a WinXP workstation, snare agent isntalled, one is a sun ...

Good morning my IDS System is composed by:-IDS-4235-K9-Cisco IDS Event Viewer 4.1-1 which dispose of signature S248I would know if there is an upgrade guide to make the upgrade activity, and I would know if I have to upgrade to ver. 5.1 also the Cisc...