Network Security

I am running a 515 with 7.0(4)4 code on it. Is there something special to setup to allow SIP through on the newer IOS? I have applied a class-map to inspect the sip traffic but I am still getting denies on udp. I have even added an acl to allow udp o...

HII have configured ASA with 4 interface viz inside, outside, dmz, wanzone.Highest sec being inside and lowest being outside.When i try to do an ftp from inside to outside that is a public ip iam not able to do passive ftp with def. ftp inspection. I...

Hi,I am fairly new at modifying the config with the CLI but we need to add an IP address to the object-group network vpn_hosts. Could anyone provide me with the proper syntax to do so or a url to the documenation?Thanks,Mike

Is there a faster way to ACK alerts in DFM instead ACKing every single alert? Right now I have 125 active alerts.

How can I configure Default Gateway for Tunnel traffic in PIX version7.0(2) configured with VPN Client access? No split tunnel configured.

I'm trying to create a list of signatures to apply to an outside interface of my 2851. It's connected to the Internet, and all I'm allowing is ICMP echo, esp, ahp, udp (non-500-isakmp & isakmp), and tcp (ssh).What I'm trying to do is create a list wh...

i have pix 501. i want to configure it to access form outside. i have tried ssh.i have given the following commands only:hostname voippixdomain-name pix.comca generate rsa key 1024ca save allssh (outside ip) (outside mask) outsidepassword 1234access-...

how can i reset to factory-default ?Cisco PIX Firewall Version 6.3(4).I try with the command "configure factory-default" ,but i receibe the next message :px01-rksl01(config)# configure factory-default'config factory-default' is not supported on PIX-5...

Hi!I have two ASA 5520 and i wonder if the following failover configuration is possible. Can i use the management 100 FE interface for sharing regular and stateful failover. If so we have 4 Gigabit interface to use for other tasks. Or do i have to us...

Hi,I have packet captured showing all of my GRE packets with an IP PREC of zero, and the internal header marked IP Prec 5. Every document I've read states GRE copies the internal header upon encapsulation. I've removed every QOS except the LAN inboun...

I've just upgraded my Cisco Pix from 6.2 to 6.3(5), but now I'm trying to upgrade PDM from 2.0 to 3.0 and every time I try to tftp the new PDM file to the firewall it looks like its installing and then I get an error stating " No PIX image found in d...

Having a problem here on a 506 6.3(4) that the user says popped up out of nowhere one morning with no changes having been made to the config. There is a 506 a layer 2 dumb switch, and then 1 internal server hanging off this switch. the PIX can ping t...

Hello!I have got one question about the purpose of IPS licence. If I correctly understood, licence should assure you to obtain signatures, so that means if your licence expires, you will not be able to apply signature to the sensor. Am I right?I try ...