Network Security

Hi,Customer is asking for a solution wherein ASA will be in transparent mode. 2 of the interfaces will fall in Admin context while other two will be part of a new context, say Context Traffic1. Now as he is also buying AIP SSM module with the boxes h...

Hello,I've got two ASA5520's I want to be setup in active/active failover mode. To do this I will need to configure security contexts. However, I wish to use ospf routing on the ASA's. OSPF is apparently not supported when ASA's are in multiple co...

Customer has a T1 for internet coming into a 1700 series router. Ethernet connection goes into an ASA 5510. I have their data network connected via Eth0/2 and a guest network connected via Eth0/1. The users on the data network can access everythin...

I installed an agent kit to my laptop to test a group setup and now when i try to uninstall it from my pc a message pops up saying that the csa service can not be stopped. I tried to find my host in the CSA MC but i could not. Has anyone ran across...

I am looking for an explanation of the changes made to the sig 1330 with release 248. Many of the Normalizer subsigs did not produce alerts before. Now they do and my sensors are firing a ton of 1330 events. Any Cisco Signature Engineers able to resp...

Hello I need to give access to all my users to a external ldap server to query email addresses, what is the command that I need to run?my internal subnet is 10.1.0.xthanks for your replies

I have an IDS "listening in" on two switches. Problems begin when a host connected to switch1 talks to another host connected to switch2. Apparently I can see the packets twice (the only difference is TTL decreased by one). To make it more interestin...

1.I was wondering if any one has run this in a production environment yet and what if any issues have you had.2.What models did you run this on the example config indicates this will function on 500 through 5500 series devices. So will this work on a...

Have a ASA 5510 with Content/URL filtering. I am looking to utilize this with a remote PIX which currently uses the content filtering of Websense. Can I point the PIX 501 (remote) at the ASA (Main) to provide for content filtering at the remote sit...

With the ASA firewalls work as failover group,how can i config the IPS module of them work as failover too?When ASA firewall works,i just need config primary one,then,how to deal with IPS mudules of ASA firewall?

I have been tring to work with a few TAC guys on getting an Out of Band, Virtual Gateway configuration implemeneted, but for various reasons, we seem to be missing each other. I belive I have everything configured properly, however, I am unable to g...

We have IDS Module in 6500 Switch .We are facing strange for IDSM,when we telne to IDSM we get banner only but we can not able to enter any command on it.We cant able to take web access for same.Is anyone facing same problem ?Can anyone help to solve...

tengo un pix 515e, un servidor que esta en la dmz no puede tener conexiones hacia internet por conexion segura que es por https o puerto 443, ya le asigne el nat statico y supuestamente si debe de hacer conexiones sin problema, pero, solo por http si...

I have attached topology . I am installing new firewall , and I am having vpn tunnels coming over to 2621 routers . I want to move away couple of tunnels to firewall.But i dont want to nat tunnel traffic , also I want to configure firewall such as tu...