Network Security

About 6 months ago I finally got round to upgrading 2 of our pixes to 7.1 from 6.3. I didn?t use them until the other week when I found that the activation keys were no longer valid. After investigating I found that they needed to be upgraded trough ...

Anybody have any good tips on managing a pair of PIXs or ASAs in Active/Standby or Active/Active mode with contexts with CSM? The documentation tells you how to add contexts etc, but not how CSM handles existing Contexts on import. Does CSM manage al...

Hello,We observed PIX firewall constantly sends out gratuitous ARP for its own IP address every 5 seconds.Is it normal?If so,what's the purpose?BTW,we have a pair of PIX .Thanks.

when i show service-module ids-sensor 1/0 statusi have the following outputService Module is Cisco IDS-Sensor1/0Service Module supports session via TTYService Module is failedService Module status is not availablewhat is the problem and how can i rec...

Hi,I have configure the PIX501 to have the following:Inside Int: 192.168.0.1Outside Int: 203.123.132.131From the PIX console, I am able to ping to outside IP ( external IP such as goolgle ..etc ) and I am able to ping to the server connected to one o...

Hi all,I have a pix 501 and I need to let Exchange traffic through. I had done this before and it worked for me, but this time its not working. I cannot telnet to port 25.Please help. See below for my configuration. I am sure its something easy, but ...

Hi All,I am tryiung to monitor my VPN Concentrator 3030 using HP OV NNM. I have done following configuratrion on my VPN Concentrator for this.Configuration | System | Management Protocols | SNMP Enable Port 161 Simultaneous Connections 4Configuration...

Dear friends....we are using cisco IDS 4235 with OS Version 2.4.18 and we want to upgrade it to the IPS 4200.my question here is what is the requirment that i need to do it are there any module i should get or what?thanks again.

hi there.... i am looking now for IPS model that i can use with it a module that will detect and prevent the fraud to my network. can you help me on that ?

Hello, I just want to know if we bougth an ASA with 1000SSL license and then we bought a fialover do we have to pay again the 10000SSL licensing? Same question for Anti-X and IPS?THanks,

Hi,Can anyone tell me the best solution for IPSEC encryption over Point-to-point Ethernet link b/w two Cat6500 with VPN SPA? At first I though we could use VTI, but learned the hard way that VTI is not supported on Cat6500/Cisco7600 (if only we read ...

We have something strange going on. When we move agents from one group to another, we see some agents back in their original group after a while. It doesn't happen to all agents, just some.I know there is a new feature in CSA 5.0 in which you can mak...

Hello all, I am hoping someone can shed some light on this for me. I am trying to set up multiple vlans on my pix box, i.e. vlan2 for subinterface e1.1 and vlan3 for subinterface vlan3. The pix keeps telling me that I need to add a failover license, ...

What are the default SNMP Strings (RO & RW) for PIX 515E with 6.3(x) and 7.0(x)? Are they "RO-public" and "RW-private"? Can both SNMP RO and SNMP RW be configured on the PIX? Thank you.Regards,Santi

I keep receiving theses two errors over and over again in my logs "WebSession::SessionTask(#) TLS exception: handshake imcomplete""received fatal_alert: certificate unknown"Currently I use IPS manager 2.2, and import the devices using TLS (cant impor...