Network Security

Hello,I have several site-to-site IPSEC VPN tunnels(using pre-shared keys) built from several 3640's(using FastEthernet) running IOS 12.2-17 to a VPN 7140 agragate(Also via FastEthernet) running IOS 12.2-15.T8. All has worked well for years. I am now...

It seems that 1330 and other normalizer sigs are causing Cicso (and myself) some grief (as evident in CSCsc37875). I am wondering if I can just disable 1330 and all the subs entirely. I am seeing this sig (1330/14 in particular) fire alot. I set the ...

Dear All I have PIX 515E with 2 interfaces, I have 4 Public IP addresses I want to publish my exchange server from the internal network I am able to access it by the public IP from any where through the internet except from my internal network, I am ...

Hello,Is there any news as to when the bug with the TCP Hijack signatures will be fixed? According to forum posts from March, the bug CSCsd00877 in TCP Hijack signatures (3250,3251)is being addressed by Cisco.I'm having the exact same problem (except...

Hi,I want to fix a connection timeout for a concrete rule. I know that I can modify the timeouts for all the connections (in the section Properties/Timeouts), but I don?t know if I can modify only for one connection.Thank you very muchBest RegardsNur...

Hi, I am having a problem with the inside interface of my failover pix. It is showing up/up on the pix and on the switch it is connected to. If I do a show arp, I can see the mac and ip ok. When i try to ping the ip from the switch however it does no...

Hi,I have a pix 515 E vers. 6.3(3). How can I back up thr current image to a tftp server?Tanks in advance

Hi does anyone know of any thing that might cause a problem with traffic going from one interface to another and have a big spped difference. I have a Pix 515E UR running 7.0.4 software i am seeing this problem between my inside and outside interface...

Hi all,I have setup a lab with a OOB VGW setup. I have setup an authentication VLAN on the untrust interface of my CAS on vlan 120 which is mapped to internal production vlan 20 when assesment is done. So far everything works fine except the default ...

Hay there,I setup a ASA FW with Trend Micro Content Security. When I add an URL to the block list I can still open it from the PCs which use the ASA as the gateway?! What did I forget?Lars

We use 3750 edge-switches connected to a 3750 to route the vlans. When we are directly connected to an edge-switch, Network Assistant runs very slow. If we use Network Assistant from a pc located on a different subnet the response is much faster. So ...

HiI want to know if it's possible to restrict snmp access to some OID.ex.: I've already an ACL to restrict who can access my device by snmp RO or RW. But for those that can access by my ACL I want to give access to some specific OID only ?Is it possi...

I have a PIX running V7.11 which has been up for 17 days with a failover partner. When I try to do a show run, I get this error:ERROR: Command Ignored, Configuration in progress...This makes it seem like it is sync'ing with the other PIX? Only it has...

I cannot seem to be able to get streaming audio/video to pass through the ASA 5510 7.1(2) IOS. Whenever I try to go to a site that streams aud/vid, the player, either Windows or Real will connect to the site, buffer, and then quit. Anyone else having...

Hi!I've got PIX 501 (PixOS 6.3.5) acting as PPPoE client. Outside interface gets IP and DNS addresses from access concentrator.There is an example in config guide how to set DNS address (got from concentrator) for DHCH daemon in PIX, so clients in LA...