Network Security

I am running an 831 at my house with the IPS inline. I am seeing my Internet speeds slow to 2Mbit when I have the IPS inline. When I remove the IPS from the interfaces I see my speeds increase to 7Mbit. I will attach my config, please take a look....

I am trying to configure an ASA5510 for outgoing secure ftp. When I try to make the connection using the ftp software (ws_ftp), the ws_ftp log says "ssl session not set for reuse" and then "ssl connect error 2". Any ideas would be greatly appreciat...

I use to be able to issue a command "show crypto isakmp sa" to show me the status of my VPN tunnels.I just upgraded to 7.1.2 and when I issue that command I see "There are no isakmp sas"What is the new command and do I have to reconfig the tunnels af...

i am trying to forward ports 80 and 8080 to different hosts on the DMZ. these lines allow me to forward port 80 but not 8080:static (dmz,outside) tcp interface www 10.10.5.13 www netmask 255.255.255.255 static (dmz,outside) tcp interface 8080 10.10.5...

This is regarding PIX failover and HSRP put together to have 100 % redundancy. Device connectivity is like this . Two routers having serial links to separate ISP’s ( R1 and R2 ). . Ethernet ports of these routers connected to two separate switch...

Hi experts, below is the output of show policy-map.PE3-AMS-EU# show policy-map int serial 3/0/10:0 o Serial3/0/10:0 Service-policy output: rao-pe-out Class-map: pe-management-output (match-any) 0 packets, 0 bytes 30 second offered rate ...

I faced a problem with a site-to-site vpn between cisco836 and cisco876. I'm ably to ping any station between the two LAN's but I can't run Remote Desktop or PcAnywhere. There is not any firewall policy enabled in both routers. It isn't something wit...

I knew that we can use ciscowork 2000 to monitor IDS.1- But can I use Cisco security agent to monitor IDS as well ?2- Are there any other software for monitoring IDS beside ciscowork 2000 ?3- Does IDS 4125 itself have web interface for monitoring ?4-...

I have enabled the debug icmp trace command on a Cisco PIX 515 running 6.3.4 at a customer site.I have a strange entry that seems to repeat itself each time an ICMP is generated thru the box. I am concerned about this output, as it looks like there ...

Hi,can someone please tell me the advantage of IPS version 5.x over the 4.x version?I assume it is still signature based just like 4.x and still difficult to see whatthe signature is looking for on the fly when you need to do so, just like the SNORT....

Hello All,I have two ASA5520 (with 7.2 software) in statful failover over LAN. And these firewalls are connected to my border routers, on border routers HSRP operates and provides virtual address - HSRPprovide the next hop for outside static route. M...

i have a pix 515E(UR), WITH 128MB RAM,16MB FLASH.I Upgrade os to 7.21 with ASDM5.21 Version.but i got a problem.if i enable logging function.the cpu usage will rise to 96%if i disable it. it back to 3~10%. its never happen when i use 6.3(3) and PDM3....

Hello all,I've two Cisco PIX firewalls configured as failover pair in active/passive fashion. I want to deploy two IPS 4235 inline mode sensors behind those firewalls.What would be the connectivity looks like?! I know that there is a layer 2 switch m...

A simple question as I cannot seem to find a why to do it on our ASA.How do you specify a range of addresses that are not summarizable? For example if I wanted to create an ACL that allows access from hosts 192.168.200.50 through to 192.168.200.239 t...