Network Security

Has anyone implement NAC appliance (CAM and CAS) in virtual Gateway OOB mode. VLAN mapping concept is used to map a quarantined VLAN to a trusted VLAN. Is looping an issue here? Pls advise the pros and cons of using this as we need more information f...

Hi! I just configured my Cisco 837 to connect to the internet. The internet services we are using are dynamic ip, so the cisco 837 was also configured with dynamic ip and the inside nat was configured with dhcp.I got a PIX 515E now, and i want to con...

Hi,we are deploying an ASA 5520 with 7.1(2)7 at the customer's site as a replacemement for a PIX 525 with 6.3(4). There are some problems with a very slow response from a remote web proxy. Web pages download, but very slowly, after a minute or so com...

Hello all,I have this problem: I have two PIXs connected each other for LAN and stateful failover. They are connected by UTP cable through interfaces Ethernet0, where are two sub-interfaces are made (1 for LAN FO, 1 for stateful failover). With OS 7....

Hi,As you guyz know recently microsoft introduced Network Engines firewall, which is nothing but ISA2004. If anybody has good information that help me to win over ISA, please please send me your views...Regards,Sha

Does anyone know if the new Cisco Security Manager (CSM) will work with version Pix 6.x? If so, has anyone configured it and has it working?

I am trying to add a custom signature in CSM3.0 for IDSM2 which is running IPS5.1 in cat6500.I am using customwizard to create the custom signature ( say "sweep" ).Under sigature, IPS5.x, I could see the created custom signature but when the sigature...

What is the best way to filter an IP from being blocked by a false positive? Event Action Filter?

Metasploit framework console version 1.99 contains an exploit for msrpc_dcom_ms03_026. (Microsoft RPC DCOM MSO3-026). I have set up a lab to see the alarms that would be triggered when this tool is used to attack a remote host The exploit is not dete...

I have a Pix 515E with version 6.3(3) in configuration Failover Statefull, I need upgrade the OS to version 7 or the last version. How can I do? Can you help me with the process and configuration?

This signature triggers on multipart/form-data POST argument values containing valid HTTP methods (GET,POST,DELETE,etc). This happens suprisingly often on the Internet.evIdsAlert: eventId=1147308732612292092 vendor=Cisco severity=medium origina...

Hello, I have an ASA 5520 with 11 vlans configured on "internal" sub-interfaces and one interface configured for outside.The ASA device is routing traffic correctly between vlans and outside interface but the sub-interfaces will not resopnd to ping o...

Hi, We have a PIX 515E running 6.2(2). I'm trying to redirect anything coming inbound on to a certain IP address and port to a different IP address. For example; traffic coming into the PIX for 13x.11x.21x.3 on port 25 needs to be sent to 13x.11x.21x...