Network Security

Dear sir, I have Catalyst 6513 + 1 module IDSM-2. I configure IDSM to monitor traffic in DMZ,internal LAN,... Now, I want to configure:When IDSM discovers some intrusion action, Catalyst 6513 will perform action to block traffic by access-list or som...

We had performance and ACL problem with PIX515E after memory and OS upgrade (6.3.4 to 7.2.2).Does anybody know which 7.x release is most reliable?

I set up two IPS's in a CAT6509 and using Cisco's IPS Event Viewer got into them fine and had traffic and everything, but after about a week i cant connect to them with event viewer i cant get into them by double clicking, but i have the red X and th...

I'm configuring WebVPN on an ASA, and using the "ip local pool" command to define a range of addresses that the clients will be assigned once they VPN in. This IP range is /not/ from any directly connected networks and/or already in the existing rout...

Hello All,I have a pix 501 v 6.3(5), connected to my dsl router. When i connect my Netgear "Safenet" vpn client to my endpoint (Dlink 808HV) I can't ping anything on the other side. i have vpn passthru enables for IPSEC & L2TP. When I disconnect the ...

We have an application (client - database) that doesn't do well with the 1 hour connection idle timeout (TCP conn).The setting is global and much has been made about adjusting that timeout. Very hesitant to extend it (they will not be happy until the...

I need to see ethernet interface utilization, in real-time and as historic reports. Is it ok to use DFM for this goal?I am viewing this information from the alerts windows in DFM, but in the column of interface utilization, instead of showing the use...

Since setting up our new Cisco ASA I have noticed the following event in the ASDM logs very frequently:Deny UDP reverse path check from 10.0.x.x to 10.0.255.255 on interface outside 10.0.x.x is always an IP on the same subnet as the inside interface ...

Hi AllPlease what is the difference btween the 2.If I have a Cat6509 with an IDSM-2 and then an ASA for all our external connection with an IPS what will each be monitoring?Also can an IDS monitor external connection that will be plugged into the ASA...

Hi all,I trying to test a solution using IPSEC-SPA to encrypt traffic and put it over a tunnel interface ( mode ipip or GRE ).The tunnel encapsulation should be done by Cat65XX itself.From documentation and from my first test results that is not perm...

hi all,im planing to put ASA 5510 at my HQ and for branch office if i go for 515E i will be able to establish VPN in network extension mode ( hope this is calles hardware based VPN). For this kind of setup whats the PIX OS required for both these equ...

at the beginning, i'm sorry for my long message.i've read here more post about my trouble...but still not foun any solution.My problem is about a VPN IPSEC TUNNEL on cisco pix 515e device. The pix OS version is 7.0.6.my win xp client have sp2 install...

hi all,I'ld like to know whether vpn work with a failover active/active. If it's possible then can someone show me the url can help.Thks,---kunale

HelloI have a 1801 router directly connected to my ISP and on my LAN (with NAT). With SSL vpn to connect to my local network from internet. it's work perfectely but I would like to pass on the tunnel to acces to internet.my local network is 192.168.0...

hi i am new to cisco ips. i wanted to ssh into the ips from a cisco router. i generated ssh keys on the router with the crypto key generate rsa command. on the ips i tried to add the authorised keys for ssh. when i copied the keys from the router and...