Network Security

Can some one on the list point me to a Cisco case study where IPS is successfully used as a detection and mitigation device in dos attacks?Is IPS necessary the best way for protecting the ingress of the network from DDOS or DOS ATTACKS? What other wa...

I have 2 PIX 515E runing the 7.0 IOS. They are configured to be a backup to each other. When I do a restart to the primary PIX i have the problem that the Second PIX becomes active and stays in that way even after the first has become avaiable again....

Hi, Because I want to change the "GRE" protocol timeout value , on the FWSM Command Reference 3.1, http://www.cisco.com/univercd/cc/td/doc/product/lan/cat6000/mod_icn/fwsm/fwsm_3_1/fwsm_ref/t.htm#wp1259027 I find the "non_tcp_udp" syntax on the web...

I have two hosts in the DMZ VLAN and when they try to ping its gets first reply and then timeouts, after troubleshooting I found out that these two host ARP to ASA mac-adress and this is strange beacuse they are in the same VLAN.What will be the effe...

laptop - crossover to the PIX via E0I don't know why i can't recover password of a PIX515E using this instruction below. http://cisco.com/en/US/products/hw/vpndevc/ps2030/products_password_recovery09186a008009478b.shtmlpix to laptop - ping oklaptop ...

Does anyone know how to monitor bandwidth hungry connections on the ASA 5520 7.2(1)?? When doing a 'show conn' I can see byte counters but there aren't approriate filters to able to sift through pages of connections quickly enough and verbosely enoug...

Hi,Any ideas, why this Network Shield Rule (For Malicious Packet) is getting triggered for these IGMP Packets ?TESTMODE: A packet with malicious content was detected. Reason: Malicious packet. IGMP: 10.1.2.136->224.0.0.22 type 0x22. The operation wou...

I set up a site to site vpn tunnel between a 2621x router and an ASA 5510 (T3 line for router and E1 for ASA). Speeds is expected to be slower than "internet" but what I am seeing is very very slow speeds. This happens with anything from downloading ...

Hi, i have a PIX (masquerading on its external interface, 10.0.0.1) connected to a 877 dsl router (10.0.0.2) whos address is obtained by dialer interface.As the PIX is doing the connection sharing via PAT for all the internal users, i would like the ...

Hi AllWe need the 1200MB throughput of the ASA 5590 but also need to do IPS. How can I go about it?Thanks

The network topology for our configuration is :One router 2821 with ccme installed and from atm (dsl) interfaces we have VPN tunnels to two remote officesEach office has a c870 router and 7912 cisco ip phonesWe want to activate the crtp compression f...

Hi,Can some one help me in configuring IDS4215 in promiscous mode.Please don't simply provide cisco links.RegardsSKRAO

I need to create a new site to site VPN where the address range on the new site is 10.1.0.0/24. The problem is that I already have this same range on a WAN connection, which the Pix knows about due to the "route inside" statement. I don't believ that...