Network Security

Hi,can someone please tell me the advantage of IPS version 5.x over the 4.x version?I assume it is still signature based just like 4.x and still difficult to see whatthe signature is looking for on the fly when you need to do so, just like the SNORT....

Hello All,I have two ASA5520 (with 7.2 software) in statful failover over LAN. And these firewalls are connected to my border routers, on border routers HSRP operates and provides virtual address - HSRPprovide the next hop for outside static route. M...

i have a pix 515E(UR), WITH 128MB RAM,16MB FLASH.I Upgrade os to 7.21 with ASDM5.21 Version.but i got a problem.if i enable logging function.the cpu usage will rise to 96%if i disable it. it back to 3~10%. its never happen when i use 6.3(3) and PDM3....

Hello all,I've two Cisco PIX firewalls configured as failover pair in active/passive fashion. I want to deploy two IPS 4235 inline mode sensors behind those firewalls.What would be the connectivity looks like?! I know that there is a layer 2 switch m...

A simple question as I cannot seem to find a why to do it on our ASA.How do you specify a range of addresses that are not summarizable? For example if I wanted to create an ACL that allows access from hosts 192.168.200.50 through to 192.168.200.239 t...

HiI am trying to configure a network almost exactly like the solution in this document:http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a00800a2cce.shtmlHowever as soon as I start to configure it my software VP...

We want to port-forward SMTP traffic from a public IP to an anti-spam appliance on our private network and also allow our internal Exchange server, on the same private network, to send outbound from the same public IP address. We use a single public ...

in 6513 switch fwsm moudls and do five vitual context,vitual context work in transparent module ,after the synchronization end of the two context(show failover is Normal ), the Duplicate address happen in switch console logging. the switch cpu percen...

hii'm trying to substitute a router C3640 with a pix-525 (ver 7.2.2) but i can't map multiple outside addresses to one internal addressin my router config i have:ip nat inside source static tcp 192.168.5.5 80 1.1.1.1 80 extendableip nat inside source...

Hi I need to upgrade IPS4240 Version 4.1(4)S91 to 5.0. How do I start the process from IDM access

My company has us using VPN client software 4.7.00.0533.We are having an issue with two employees being on the same network running the client, one always gets kicked off.Is there a way for two people to be on the same network and run the software si...

Is it possible to configure an IPsec vpn client using novell login? Looks like IPsec vpn does not support multicast. But I am assuming it talking about site-to-site IPsec VPN, not remote access vpn, it is right? When I using VPN client access ASA, th...

Hi all,Got an IDS on 4215 and generating reports through VMS 2.3. At some point the VMS application crashed. After reinstallation with all similar parameters, the reports during the crash cannot be generated. So far, we understand that the logs are s...

Does Cisco IPS 4200 series support SSL encrypted threat protection ?RegardsMohamed

Hi, actually i have this scenario:pix 515e version 6.2(2) with on board6 interfaces but now configure with 3 interfaces (in this mode):INTERNET ROUTER (ETH 172.17.10.1) I I I I(OUTSIDE - 172.17.10.2) PIX -INTF2--.2---------...