Network Security

Have a ASA 5510 with Content/URL filtering. I am looking to utilize this with a remote PIX which currently uses the content filtering of Websense. Can I point the PIX 501 (remote) at the ASA (Main) to provide for content filtering at the remote sit...

With the ASA firewalls work as failover group,how can i config the IPS module of them work as failover too?When ASA firewall works,i just need config primary one,then,how to deal with IPS mudules of ASA firewall?

I have been tring to work with a few TAC guys on getting an Out of Band, Virtual Gateway configuration implemeneted, but for various reasons, we seem to be missing each other. I belive I have everything configured properly, however, I am unable to g...

We have IDS Module in 6500 Switch .We are facing strange for IDSM,when we telne to IDSM we get banner only but we can not able to enter any command on it.We cant able to take web access for same.Is anyone facing same problem ?Can anyone help to solve...

tengo un pix 515e, un servidor que esta en la dmz no puede tener conexiones hacia internet por conexion segura que es por https o puerto 443, ya le asigne el nat statico y supuestamente si debe de hacer conexiones sin problema, pero, solo por http si...

I have attached topology . I am installing new firewall , and I am having vpn tunnels coming over to 2621 routers . I want to move away couple of tunnels to firewall.But i dont want to nat tunnel traffic , also I want to configure firewall such as tu...

After my IDSM-2 crashed, I got a dump and noticed the following error:13Sep2006 15:35:11.250 2.010 sensorApp[13544] sensorApp/W errWarning Producer appears to be out of superblocks...consider configuring TCPReassemblyMode to loose FreeBlocks: 9Can an...

i have an interface on one of my dmz interfaces with ip address 172.27.127.1/24 to a LAN with networks 172.27.127.0/24 and 172.27.124.0/24...how do i reach the 172.27.124 network through this interface through the PIX dmz int ,can it accept a seconda...

Can anybody help, I can't get my sniffing interface to work. I can manually set it by doing the ifconfig xxx up, but it won't remain and does not seem the to be the right solution. I have the following error below, any help is appreciated.Modify syst...

I have a Cisco 4215 IDS sensor running 5.1-3 I am trying monitor events using Ciscoworks VPN/Security Monitoring Solution but I get a connection status of indeterminate under the Monitoring Center, Security Monitor, Monitor, Connections. I have 29 ...

I would appreciate a lot if I can get this solution along with CISCO Hardwares.The managing team explains the application as aloosely coupled application for this cluster. As youbetter know, these kinds of applications, generally,do not need an inter...

Hi, I'm sending a multicast stream from a pix dmz. I have no problem to receive the stream from more secure interfaces, but i can't receive it from less secure ones.I have enabled multicast-routingI have reviwed the syslog (there are no errors)I have...

I ran into a horror case yesterday when I was trying to setup failover with my PIX 515E (with 7.21 code). Details is as follows:Existing PIX 515E (the only active one)interface Ethernet5 description LAN/STATE Failover Interface speed 100 duplex fullN...

I am trying to enable int1 so it can send TCP resets. When I attempt to enable it, I get the following error:"Error: This operation is illegal because interface, int1, does not belong to an interface group."I have a group set up that contains the sen...

HiI'm thinking of purchasing a ASA 5520. The spec says it supports 25 vlans. Now I'm not sure what this means. I currently use 21 vlans across the network for various purposes some. Five of these are used for DMZ areas, which I have created using teh...