Network Security

Hey guys, this may be a silly question but what are the HEX numbers after the ACL all about? Can you use them to tie the ACCESS list hit with the line in the ASA? That would be cool. Thanks. access-list inside-in line 8 extended permit tcp any any eq...

When I try to run the CSM Client from my laptop over a vpn the client always hangs when it says synchronzing with DCR. I believe it might be an MTU issue but can not test at the moment. Has anyone had trouble with this?

Hi,Customer is asking for a solution wherein ASA will be in transparent mode. 2 of the interfaces will fall in Admin context while other two will be part of a new context, say Context Traffic1. Now as he is also buying AIP SSM module with the boxes h...

Hello,I've got two ASA5520's I want to be setup in active/active failover mode. To do this I will need to configure security contexts. However, I wish to use ospf routing on the ASA's. OSPF is apparently not supported when ASA's are in multiple conte...

Customer has a T1 for internet coming into a 1700 series router. Ethernet connection goes into an ASA 5510. I have their data network connected via Eth0/2 and a guest network connected via Eth0/1. The users on the data network can access everything c...

I installed an agent kit to my laptop to test a group setup and now when i try to uninstall it from my pc a message pops up saying that the csa service can not be stopped. I tried to find my host in the CSA MC but i could not. Has anyone ran across t...

I am looking for an explanation of the changes made to the sig 1330 with release 248. Many of the Normalizer subsigs did not produce alerts before. Now they do and my sensors are firing a ton of 1330 events. Any Cisco Signature Engineers able to resp...

Hello I need to give access to all my users to a external ldap server to query email addresses, what is the command that I need to run?my internal subnet is 10.1.0.xthanks for your replies

I have an IDS "listening in" on two switches. Problems begin when a host connected to switch1 talks to another host connected to switch2. Apparently I can see the packets twice (the only difference is TTL decreased by one). To make it more interestin...

1.I was wondering if any one has run this in a production environment yet and what if any issues have you had.2.What models did you run this on the example config indicates this will function on 500 through 5500 series devices. So will this work on a...

Have a ASA 5510 with Content/URL filtering. I am looking to utilize this with a remote PIX which currently uses the content filtering of Websense. Can I point the PIX 501 (remote) at the ASA (Main) to provide for content filtering at the remote site?

With the ASA firewalls work as failover group,how can i config the IPS module of them work as failover too?When ASA firewall works,i just need config primary one,then,how to deal with IPS mudules of ASA firewall?

I have been tring to work with a few TAC guys on getting an Out of Band, Virtual Gateway configuration implemeneted, but for various reasons, we seem to be missing each other. I belive I have everything configured properly, however, I am unable to ge...

We have IDS Module in 6500 Switch .We are facing strange for IDSM,when we telne to IDSM we get banner only but we can not able to enter any command on it.We cant able to take web access for same.Is anyone facing same problem ?Can anyone help to solve...