Network Security

I have a catalyst 6500 swtich containing FWSM and IDSM-2 module. Vlan 1000 is the outside interface for the fwsm to which all bussiness servers are mapped (vlan 900, inside interface of fwsm). I want to inline IPS all the traffic going to these bussi...

I've been trying to resolve an issue, but I'm having some trouble as I'm not very good with firewalls. My firewall seems to be changing information in the HELO command of SMTP traffic. It SHOULD look something like '220 mail.domain.com ESMTP postfix'...

Greetings all,Not sure if this is even the right place to ask this question? If not kindly direct my to the proper forum.I was given a used Cisco Pix 501 Firewall from a friend as I will be starting Cisco training soon. The Pix works and I have found...

Hi,From the Cisco Pix Firewall logs is it possible to determine if "PortScan" attack has occured ? Appreciate an early reply.-S-

This is a weird one to me. Looks like there is a certain pecking order to how the PIX handles requests when it comes to VPN's.2007-01-24 11:44:19 Local4.Error 10.200.89.1 Jan 24 2007 11:44:20: %PIX-3-305005: No translation group found for tcp src new...

hello,can anybody tell me whether auth-proxy feature is supported by tacacs+, i mean i want to use tacacs+ as auth protocol and not radius.although i configured the setup as mentioned in the below url.http://www.cisco.com/en/US/partner/products/ps635...

Hi..We have upgraded IDS 4215 to IPS version 5.1 at one of our clients. And now we have oput it in inline mode. Scenario is as follows::Location A is connected to location B with IPS coming after router and then Firewall and then the DMZ...When i m t...

I have a pix515E that was working fine. then it got in rommon a few days ago and now it shows nothing in hypertrm window except for that in the attachment. what is wrong with it and what can be done, can you tell?

I have to upgrade the PIX OS from 6.3(1) to 7.X.There are few crypto ( site-site)configs with preshared keys.I remember that I had faced issues on the 1700/2600 old routers when upgrading the IOS, the preshared keys seems to be not working.I used to ...

We?re looking for software that will help us audit and keep track of firewall policies. We are constantly doing audits on our firewalls, whenever there is a change. We would also would need to link to documents to change control documentation unless ...

Hi All,1. We've one web server which is accessible from outside.RuleAny Web Server http/httpsI am seeing lot of drops by clean up rule on daily basis from the web server to internet sites. On running snoop i see when web server is sending to Internet...

I configure a IPSec Tunnel to Nortel Contivity switch out of my network. The problem is: when I use "show crypto ipsec sa" and "show crypto isakmp sa" commands, the outfut is as following:firewall# show crypto ipsec sa interface: outside Crypto map t...