Network Security

IDSM2 with IPS5.1 (on cat65K sup 720 IOS 12.2SXF) will support ? Inline ? mode.But does it support ? blocking? as well ? ??? CCO document says ?Supervisor 720 with Cisco IOS supports VACL deny statements; however, IDSM-2 cannot block with Cisco IOS...

Hi,I would like use netflow on one or two interfaces. But i have a problem, because when i use netflow, i'm all reccords for all interfaces.On the interface, that i want monitor, i use ip flow egress commandthanks your help.

HiIPS version 5.1 was not stable in our network, so TAC engineer gave us a special patch (1p1) and we installed it.This 1p1 was not published on CCO officially.Now version 5.1(2) is out, does anyone know whether 1p1 is incoporated into this 5.1(2)? C...

I have a need to establish a secure tunnel between two sites by using two routers, or two PIX525 firewalls, or two VPN3030 concentrators; the equipment is not an issue. This connection should be functioning as a transparent bridge, so layer 2 traffic...

We are planning to take an ASA 5520 box for with Cisco ASA Advanced Inspection and Prevention (AIP) Security Services Module, already we have 1Mbps internet connection. Now for VPN service through this box, what should I do ? take a new internet conn...

Hello Here's my problem. I have a pptp vpn configured in my pix 506e. I can connect fine and browse network resources on the remote network by IP address. I can connect to any computer using MS remote desktop connection. I cannot browse by netbios na...

HiWe have ICS server installed for a customer using Cisco IPS.We need to email alerts for the customer, however it does not accept the customer's email addresses because there is a '-'!!E.g.It accepts zhichao@scs.com.sg but not zhi-chao@scs.com.sgOth...

I have searched for an answer on this with no luck.My question is in an ASA 5520 v7.2, is the correct syntax to shun a complete network block;ASA(config)# shun 192.168.1.0Every documented procedure I have found only talks about specific IP addresses,...

I have an ASA5510 at location 1, and a PIX at location 2. Location #2's PIX is on a multihomed BGP routing setup, so it's primarily covered for any issues.Location 1 has 2 internet lines but each is routed independently and thus not multihomed. Can ...

I am setting up redundant 5520's for the first time and have a question on the failover interface. I have read but can't now find info on best practices regarding the management interface as well as the failover interface. My plan is to implement sta...

We see this signature alot... 3002 - TCP Syn Port SweepSource and destination are internal and port 53-DNS, 88-Kerberos, 135-Endpoint Mapper, 139-Netbios, 389-LDAP, and 445-SMB.Thoughts?

Hi,We'd like to configure qos on a pix.For the moment, we use an ios ver 6 and our pix is configured for pppoe.Do we need to upgrade to ver 7 ? which version we exactly need to use ( for both qos and pppoe ) ?