Network Security

Does anyone know how to monitor bandwidth hungry connections on the ASA 5520 7.2(1)?? When doing a 'show conn' I can see byte counters but there aren't approriate filters to able to sift through pages of connections quickly enough and verbosely enoug...

Hi,Any ideas, why this Network Shield Rule (For Malicious Packet) is getting triggered for these IGMP Packets ?TESTMODE: A packet with malicious content was detected. Reason: Malicious packet. IGMP: 10.1.2.136->224.0.0.22 type 0x22. The operation wou...

I set up a site to site vpn tunnel between a 2621x router and an ASA 5510 (T3 line for router and E1 for ASA). Speeds is expected to be slower than "internet" but what I am seeing is very very slow speeds. This happens with anything from downloading ...

Hi, i have a PIX (masquerading on its external interface, 10.0.0.1) connected to a 877 dsl router (10.0.0.2) whos address is obtained by dialer interface.As the PIX is doing the connection sharing via PAT for all the internal users, i would like the ...

Hi AllWe need the 1200MB throughput of the ASA 5590 but also need to do IPS. How can I go about it?Thanks

The network topology for our configuration is :One router 2821 with ccme installed and from atm (dsl) interfaces we have VPN tunnels to two remote officesEach office has a c870 router and 7912 cisco ip phonesWe want to activate the crtp compression f...

Hi,Can some one help me in configuring IDS4215 in promiscous mode.Please don't simply provide cisco links.RegardsSKRAO

I need to create a new site to site VPN where the address range on the new site is 10.1.0.0/24. The problem is that I already have this same range on a WAN connection, which the Pix knows about due to the "route inside" statement. I don't believ that...

We admin our customer PIX' via SSH. I would like to be able to remotely upgrade the IOS over a VPN tunnel. What's necessary from a config standpoint?

I'm not able to ping to PIX DMZ interface which is configured with public ip address from the inside LAN.

OK, I need some ideas how to solve this problem. This will be a quite brainstorming for you ;).IP addresses are not real, but as in my real situation they are public IANA addresses :).I will describe network situation:PIX running PIXOS6.3 with three ...

Hi,I was using ASA5510/asa712-k8.bin. But i had problem with http inspect command.It didn't work properly.And also having enabled OSPF on ASA cpu usage became 35%.After downloading Asa721-24-k8.bin...Http inspect and CPU load problems has been solved...

Hello Friends,Can any body tell me why IPS/ISD is better than just having firewall plsthanks

Hello,Pls i want some features of IPS/IDS over Firewall