Network Security

Hello,I currently have 2 ASA 5520s in an Active/Standby configuration. I have set up 2 VLANs on the ASA corresponding to port g0/0. Config:Int g0/0.1vlan 10nameif Outside66ip address 66.38.xxx.xx 255.255.255.224Int g0/0.2vlan 20nameif Outside64ip add...

Hi I am getting all the cisco devices discovered in DCR but missing one of the 6513 in the data collection which is already there in DCR.It is also missing in the topology diagram.However this 6513 is reflected in all other modules like DFM , RME and...

I'm curious to see if anyone can help with my situation. I currently do not NAT on my inside interface:NAT 0 0.0.0.0 0.0.0.0I need to start doing policy NAT for some internal hosts going from inside private IPs to certain sites off of one of my DMZ i...

Will there be a signature 5799 for 4.1 sensors?

i have a box that sits in my DMZ that i can't get dns resolution from an internal dns server on our internal network, ip 192.168.1.8i am having trouble get the requests through the fire, any help would be appreciatedbelow is my configinterface Gigabi...

Hi I am preparing for IPs and got confused with the below question. Please advise. Q : A new sensor is generating a great deal of false positive alerts on the web servers. Which two action will help to reduce the amount of the false positives. (choos...

Integrated Security Router 871-Sec K9 needs SDF [Signature Definition File] updates.Where could be found?Thank you.

In 6.X standby IP addressing was not mandatory for the interface configurations. Has this been changed in 7.X? My coworkers encountered problems configuring failover on a public network where we only had a slash 30 address space. Is there any way to ...

The signature for syn flood DOS (6009) has two values that I can see will alter the signature threshold.event-counter ----------------------------------------------- event-count: 2600 default: 200 event-count-key: AxBx <defaulted> specify-alert-inter...

I have a weird situation that I could use some help with.I have a customer that is using an RFC 1918 range internally. One the remote end of an IPSEC VPN a vendor is using in part some of the same block. I need to be able to NAT two system to new add...

Is there a way to move a 3des license file from one pix to another? We just installed updated pix at one of our locations, but it did not have the ability to use 3des. I am wondering sense we purchased this 3des license for the older pix if I can som...

We have some VPN 3000 concentrators in our network. We use "cacti", a variant of the MRTG tool to graph various things. Amongst them, we also graph circuit utilization of our Internet bandwidth.My routers and PIXs work fine in this regard. However, I...

We currently have a PIX 506e setup as our firewall. We have connectivity and everything is great except one thing. Basically we have a web server that has an internal ip address that we can access from the Intranet and an external ip address that we ...

I am currently running 2851 routers at my remote sites, with the IPS monitoring inbound and outbound traffic. When a user at my remote site tries to access certain links on our webpage (Works fine with IPS turned off) the page times out. If I continu...

1._ When i try to re-import a sensor (in order to have the same configuration) it is generates the following error message:Re-import StartedSensorConfigImport caught: The system exec did not complete within the given watchdog time(120 seconds)Re-impo...