Network Security

have been practicing on a home lab setting up a site to site vpnbetween a pix 515 running os 7.0 and a pix 501 running os 6.3 using certificates for authentication all seems to work ok but there is one thing i have been unable to find out both pixes ...

I have a 515 running 6.3.3 with a DMZ. I am having some problems understanding the natting for the DMZ. Basically I have an internal network (10.0.0.0/8), DMZ (172.18.5.0/24), and outside (0.0.0.0/0)I would like a DMZ server to be able to address t...

I would like to implement SSL VPN on out ASA 5520 it currently has Version ASA 7.05How do I verify that I have the correct license? I understand that the original ASA version had the license free but upgrades require a purchased license. TAC clai...

I would like to implement SSL VPN on out ASA 5520 it currently has Version ASA 7.05How do I verify that I have the correct license? I understand that the original ASA version had the license free but upgrades require a purchased license. TAC clai...

Hi,Has anyone who uses MARS had a chance to look at the new Cisco Press book yet? Just wondering if it's any good as the description makes it sound kind of high-level, rather than very technical.Andrew.

I have a requirement to allow 11 internal hosts to access an FTP server through a site to site VPN tunnel. The other side wants to see a public IP address that is not the peer address (outside interface). I?ve been unable to make a NAT that will tr...

Hi,i have a network infrastructure with one branch office and trhee remote site.Please, see the picture attached in help!I have make a vpn connection between branch office and three remote site, all single remote site contact only branch office and i...

Hi security PRos, Is it possible to upgrade an IDS device to have an IPS capability, if yes, how? Thanks in advance

I am working with CISCO ASA 5540 with AIP Module, and i see a lot of events from signature 50000 "Outbreak Prevention Signature" with high severity. Could anyone explain this signature? What does it mean? Is it useful to be enable or not? Regards, Cr...

I have downloaded and installed my agent kit on a WinXP machine. But for some reason it is not registering with the CSA MC. Any idea why? The CSAMC is in a different subnet, but 443 is open for communication. Does the MC need other ports open to talk...

Hi,I have a problem, I need to migrate two Pix firewall from a network to another.I have this situation:PIX active actually has been disconnected from the network and the standby pix becomes active and the failover is now switched off.I need to move ...

Every day or two I lose my interent connection and all I have to do is reset the power on my PIX to get it back. Can someone explain what is going on?

Hi All,I am fairly certain this is something that happens all the time and a very easy thing to do for most. I have never set up a dmz and am not the best at pix. I have an asa 5510 and I am trying to setup a ftp server in the dmz that i can reach ...

I know the PIX checks the Websense every five seconds (show url-server stats), but using what mechanism? A test query? A simple ping test?Thanks.-Jim

Anyone else seen a problem with IDSMC 2.2 not updating its NSDB since release of SigUpdate S250?What's up?