Network Security

About a week back I used the erase command but actually (I think) erased my .bin image file from one of my ASA 5520s (We were in Active/Active configuration during testing, but decided to go with Active/Passive) so I attempted to erase the configurat...

Is this possible?in short topolgy is as follows:serverA -> Pix -> Chekpoint -> serverBNat is done on the Checkpoint. HoweverServerA -> ServerB produces 305005(no translation group)Between the PIX and the Checkpoint I have ohter devices that ServerA...

hello!i have pix 515e wich protect my dmz and corporate network.i have ipsec vpn lan2lan connections to outside officesin my network i use 15 exchange 2003 mail servers and 1 sendmail mail gateway in dmz. one exchange 2003 server is inside net wich c...

Hi everyone.Do any of you have any experience with blocking certain http conten based on the mime type?We would like to block streaming audio and video which is transfered via HTTP.This should be possible by specifying the different mime-type to be b...

The LAN ports (1-4) appears to lock-up. Cannot ping or get arp requests from the LAN side of the firewall. Also the activity lights on the LAN side will stay hard light even when nothing is plugged in. On responses to power plug off/on. Code 6.3 (5)....

I have a pair of PIX 515e's in a failover configuration using the failover cable. I have simulated a power failure on the primary device and the secondary device kicks in straight away - exactly as it is supposed to!My question is, if the primary dev...

Hi , this is quite a general question . I'm wondering about ASA55xx vs PIX . What are the differences ? Is PIX phasing-out replaced by ASA ? thanksStefano

Hi,I am having IPS 4255 with version 5.1, we installed the vms 2.3 with cisco common services, IPSMC,SecMon and cisco view. Unable to see the events in event viewer which is in secure monitor and it is showing status as TLS is connected in the device...

I have seven ASA5510 with the SSM-10 modules running v5.1(1). On a regular basis the VMS will report that the analysis engine is not running on any of the seven. I then will go to the sensor and reset it and it will work for a while.Is anyone else ha...

Dear friends,I'm trying to deploy a solution of webmail using MS Exchange 2000 (front-end and back-end servers). However, I could not install MS EXCH on front-end server (located in DMZ) because it's not reaching the domain controller on INSIDE.I re...

I have a PIX 515 at a hub site connected via L2L VPN to a small office. I recently had to upgrade the PIX to 7.1(2) so I can use the Hub-Spoke-Client enhancements but ever since the upgrade I have problems at the small office where the IP phones keep...

I put our 4250 inline with our PIX using the interfaces setup as pairs. The IPS was set to take no action on all sigs. After about 10-15 minutes traffic to the PIX stopped from inside and I had to move back to the oringal port. The PIX is on it's on ...

hello,pls help me:цhether module WS-SVC-IDSM-2 includes sub-module WS-SVC-IDSUPG by default? or WS-SVC-IDSUPG sold separately?

Unable to get traffic flow notifications from and IPS Ver 5 sensor to show up in CSMARS. They are showing in the monitoring on the sensor, but never show up in CSMARS.Is there something special that has to be done for these to be sent to CSMARS?I re...

I am trying to load the asdm504.bin file onto one of my ASAs but the command keeps failing.... the command that I had was: copy tftp://your-server-IP/pathtofile flash:/asdm504.bin but that isnt working... does the pathtofile actually have to be the f...