Network Security

We've got an ASA5510 that is blocking outbound mails for certain domains (for other domains there's no problem, there are no issues with any inbound mails as well). The mail server keeps logging this "The DNS server encountered an invalid domain name...

Hi Everyone,I have my ASA5520 setup with radius auth on webvpn and everything is working great, even group assignment with the radius class OU=group1; etc...I need to go a step further with this. I want users to not have to reenter the same userid an...

Anyone can recomend a good reference on how to set up IPSEC hairpining? we have an ASA in one city and a pix in the other. We want to be able to vpn in to one and tunnel to the other if needed.

With SecMon 2.2, the TCP SYN Host Sweep (3030.0) fails to display the victim’s port in the console. The console shows <n/a> in the port field. The sensors are at version 5.1.1p1. The command “Show Events Alert Info” on the sensor reveals that the des...

After changing the IP address of the TFTP server in my Pix config, the config backup on the TFTP server failed.The error message displayed while trying to backup the running config via PDM is the following attached.Help pleaseRegards

According to a Cisco TAC tech. you can upgrade the ASA from 7.0(4) to 7.2(1) without doing incremental upgrades. But on the 7.2(1) release notes it states otherwise !HELP !!!Upgrading to a New Software Version If you have a Cisco.com (CDC) login, you...

I am getting more help on this forum than from BT itself they are so un helpfull is unbeliveable. Thank you everyone who helped earlier and will help now My very recent post on this forum was.." Cisco 3750--cisco Pix 515 E --- Cisco 877"*************...

I'm trying to change the Pix inside IP adress and DHCP scope, both the web interface and the command line interface tell me that the ip address doesn't match the scope ....or that the scope doesn't match the local interface. I have tried turning off ...

Anything thoughts? Are false positives being reviewed for next signature release?We are seeing alot of activity triggering this signature. The attacking ip is from Microsoft itself so must be a false positive?.... 207.68.179.220 (http://advertising...

Customer has a new ISP at a remote location and is needing to reconfigure the PIX. Having anyone onsite with the skills to do anything more than plug it in is questionable at best. Trying to avoid talking someone through the IP and route configurati...

Is it possible to configure an IPIPGW behind a PIX running 6.3 code? I have tried the latest 6.3(5) code, and with the H.323 fixups enabled, calls are not placed, resulting in PIX logging messages stating "call PROCEEDING before SETUP". The only work...

I have a 2651XM with 128MB and I'm trying to figure out what the best practices are as far as IPS is concerned. I downloaded the latest SDF and I'm trying to load all the threats (excluding the disabled ones) via SDM but for some reason the number t...

This is an internet phone company....may be ads on various websites triggering this. Various victim ports. Anyone have any thoughts on this firing?The attacker is 67.133.234.53 (www.sunrocket.com)All events are firing from Out-INAttacker Context: 8...