Network Security

Since setting up our new Cisco ASA I have noticed the following event in the ASDM logs very frequently:Deny UDP reverse path check from 10.0.x.x to 10.0.255.255 on interface outside 10.0.x.x is always an IP on the same subnet as the inside interface ...

Hi AllPlease what is the difference btween the 2.If I have a Cat6509 with an IDSM-2 and then an ASA for all our external connection with an IPS what will each be monitoring?Also can an IDS monitor external connection that will be plugged into the ASA...

Hi all,I trying to test a solution using IPSEC-SPA to encrypt traffic and put it over a tunnel interface ( mode ipip or GRE ).The tunnel encapsulation should be done by Cat65XX itself.From documentation and from my first test results that is not perm...

hi all,im planing to put ASA 5510 at my HQ and for branch office if i go for 515E i will be able to establish VPN in network extension mode ( hope this is calles hardware based VPN). For this kind of setup whats the PIX OS required for both these equ...

at the beginning, i'm sorry for my long message.i've read here more post about my trouble...but still not foun any solution.My problem is about a VPN IPSEC TUNNEL on cisco pix 515e device. The pix OS version is 7.0.6.my win xp client have sp2 install...

hi all,I'ld like to know whether vpn work with a failover active/active. If it's possible then can someone show me the url can help.Thks,---kunale

HelloI have a 1801 router directly connected to my ISP and on my LAN (with NAT). With SSL vpn to connect to my local network from internet. it's work perfectely but I would like to pass on the tunnel to acces to internet.my local network is 192.168.0...

hi i am new to cisco ips. i wanted to ssh into the ips from a cisco router. i generated ssh keys on the router with the crypto key generate rsa command. on the ips i tried to add the authorised keys for ssh. when i copied the keys from the router and...

Hi Folks,I have a Cisco 1801 VPN router (using PPPoA) which I currently have one PC attached to the Fe0 port which in turn picks up a DHCP address from the local pool within the router.I am now planning to add a few more PC?s to the site and I was lo...

I have a possible spam relay from a PC in my internal network. I have tried to lock down the PIX firewall so only port 25 traffic would be allowed out from the exchange server.My attempt blocked both incoming and out going legitimate mail.Could some ...

Hi All,I have two 5520 in A/S statefull failover, sw: 7.2(1). My problem is that the secondary node after some days or week takes over the resources and become active. It show that there was an interface check error, nut as I checked there was not. A...

Does anyone know if the Pix515e with 7.0 supports Netflow? If so how?Thanks!

We have a physical interface that has 2 vlans on it. On show interface, there is the following:21450335 invalid VLAN ID errors, 61212 native VLAN errorsThe invalid VLAN ID errors are incrementing by about 120 a minute....does anyone have any ideas wh...

PIX running 6.3(4)All, I have tried to NAT out an internal IP using (ip's slightly changed):static (inside,outside) 12.15.27.24 172.16.251.251 netmask 255.255.255.255 0 0to allow access to a external PPTP server. When I run a debug icmp trace (after ...