Network Security

I am trying to input a statement into a pix running 7.06 that we had in in a 6.3.4 version pix. The statement is as follows: nat (inside) 0 access-list no-natI get this error message on the console.ERROR: access-list has protocol or portWe do have a ...

Hi!It seems that the most comfortable way of managing ACLs is to use the "configure net" command. Is there perhaps an even better way to do this?In contrary to a Cat6000, where i can use rsh to script FWSM-commands, i always have to log in to the FWS...

Hello all,I want to ask you some question about ASA AIP-SSM module licensing.For example, when we want to purchase a ASA 5520 with AIP-10 module, does it have a default AIP license to work without upgrading to new signatures?Out of box, when you open...

This is the output when the proccesor was high. Some of the VPN client users were unable to log in. when those users that were logged in started getting out the proccessor activity started going down until it reached 7%.

Hello all:I am in the initial stages of setting up an FTP server in our network which will need to be accessible from the outside and through our PIX. Is there any tutorial or article that anyone knows about which could guide me through the PIX porti...

Does IEV v5 support IPS 6.0? If not, will there be a new version of IEV?

Hi,Recently we brought AIP-SSM-10 module in ASA, required licenses are updated by vendor. When it comes to updating signature files, Cisco requires valid CCO account, i have got guest level access only, my vendor he will provide signatures as and whe...

Hello all:This is probably a dumb question but I am still a Cisco noob so please bear with me.When clients connect remotely through VPN how does one configure their PIX to allow them to still use the Internet while connected?Thanks,John

Hi,How to block p2p application using AIP-SSM-10 working with ASA5520?AIP is on promiscuous mode.Thanks,Siva

hi all i have a little confusion abt the event count parameter in the signatures. i am not sure whether this parameter is for firing the signatures or for writing the events to the event store. by default the event count is set to 1. if i set the eve...

I only get the option to save the image file from tftp to flash.Any ideas?Thanks

Suppose that I have royally messed up my running and start-up configs:Since configure net merges a tftp backup with the running config, I think this would make things worse.From a console connection, I can1. execute write erase, reload.2. configure i...

I have a ASA5510 that I performed a write erase on now my PDM does not work even after running the setup from the CLI. Do I need to reinstall or TFTP the PDM back on the ASA?

Hi all,Does the catalyst 2948G-GE-TX switch supports NAC ??Regards,Sathish.