Network Security

Hello,i am in charge of auditing access rules on a PIX V7 with 11 interfaces including 5 logicals one, it seems that we have 570 rules with a lot of hosts/groups and we want to know better which traffic is allowed on the pix.Can somebody suggest me a...

Referring to http://forums.cisco.com/eforum/servlet/NetProf?page=netprof&forum=Security&topic=Intrusion%20Prevention%20Systems/IDS&CommCmd=MB%3Fcmd%3Ddisplay_location%26location%3D.1ddcde2aA- I can telnet to the IDS (at work) , but I am trying to fig...

HelloI have problem with FWSM ver 2.3(3). I have only one context :Administrator. Servers in DMZ have slow response time. When I type show cpu usage in context Adminsitrator it shows 0% but when I enter the same command in context sytem it shows 98%....

hi all,i'm new to security.anybody can give an idea about NAC ?i have seen this in ISR's but dont know whats it exactly.what are the services associated to this. will rate all the posts related to this.Thanks& RegardsBinoy

I am upgrading to Version 7.1.2 and have read since I have PDM installed I have to use monitor mode. I never use PDM can I remove it before the install and if so how? Here is my current flash.flash file system: version:3 magic:0x12345679 file 0:...

I am running an 831 at my house with the IPS inline. I am seeing my Internet speeds slow to 2Mbit when I have the IPS inline. When I remove the IPS from the interfaces I see my speeds increase to 7Mbit. I will attach my config, please take a look....

I am trying to configure an ASA5510 for outgoing secure ftp. When I try to make the connection using the ftp software (ws_ftp), the ws_ftp log says "ssl session not set for reuse" and then "ssl connect error 2". Any ideas would be greatly appreciat...

I use to be able to issue a command "show crypto isakmp sa" to show me the status of my VPN tunnels.I just upgraded to 7.1.2 and when I issue that command I see "There are no isakmp sas"What is the new command and do I have to reconfig the tunnels af...

i am trying to forward ports 80 and 8080 to different hosts on the DMZ. these lines allow me to forward port 80 but not 8080:static (dmz,outside) tcp interface www 10.10.5.13 www netmask 255.255.255.255 static (dmz,outside) tcp interface 8080 10.10.5...

This is regarding PIX failover and HSRP put together to have 100 % redundancy. Device connectivity is like this . Two routers having serial links to separate ISP’s ( R1 and R2 ). . Ethernet ports of these routers connected to two separate switch...

Hi experts, below is the output of show policy-map.PE3-AMS-EU# show policy-map int serial 3/0/10:0 o Serial3/0/10:0 Service-policy output: rao-pe-out Class-map: pe-management-output (match-any) 0 packets, 0 bytes 30 second offered rate ...

I faced a problem with a site-to-site vpn between cisco836 and cisco876. I'm ably to ping any station between the two LAN's but I can't run Remote Desktop or PcAnywhere. There is not any firewall policy enabled in both routers. It isn't something wit...