Network Security

i need a good link about IDM GUI for IPS to configure some settings to prevent attacks from getting to a web server IP=192.168.1.50 from outside attackers.

Hi All,Can anyone help on this command,access-list TCP_PORT_RANGE permit tcp host 202.187.24.90 host 192.168.199.90 range 5500 5800nat (inside) 10 access-list TCP_PORT_RANGE outsideglobal (outside) 10 202.187.24.90Can anyone explain how this can work...

Hi all i have a problem with pix 515E. i have a pix-515e restricted bundle.thru licence upgrade now its a UR pix.and for failover i have purchased a PIX-515E-FO-BUN, this pix i want to use as a standby PIX,and i configured everything perfectly for st...

Hi,A weird thing I'm facing here. I have a lot of PIX-515E-UR units coupled with FO units all of them running PIX OS 7.0(4).All my PIX units are using serial failover and have an additional NIC that is used for stateful failover.A while ago I got two...

Hi,How do I determine whether my IPS 4255 box has been updated with the IPS-sig-S217-minreq-5.0-1.pkg signagure?

I'm new to the IPS/ASA and looking for more information on IPS event log monitoring. I have the VMS software and I am looking into configuring a syslog server to capture events. We are a fairly small network (50-60 nodes) with only 3-4 cisco devices ...

At what point does the PIX issue the 'connection built' syslog message. Example - 04 04 12:42:38 DMZPIX %PIX-6-302013: Built outbound TCP connection -668712345 for outside:xxx.xxx.xxx.xxx/1234 (xxx.xxx.xxx.xxx/1234) to inside:xxx.xxx.xxx.xxx/4514 (x...

Everytime I re-import sensors into IPS MC and to later attempt to generate sensor configuration, they always fail with the following sensor error(s): "The configuration of Sensor contains duplicate SigEvent Action Filters.This was probably caused by ...

I have a weird situation. I can surf the internet just fine with most web sites. However there are a few that I can't get to through my PIX (i.e. microsoft, ebay, yahoo mail). Can anyone think of anything that might be the cause? I know it has someth...

Dear all,in one of my client site, i tried to access the ftp server hosted in USA from the internal network behind the ASA 5520. Please find below the script of the firewall.The internal ftp client is connected to the inside ISA server and the ISA se...

I'm want to upgrade my pix firewall 515 from 6.1 to 6.3. I'm wondering if the config would stay intact or will that all be lost? and also if i copy config, could i just put that back if it gets changed?sorry, i'm new o this. thank you ahead of time.

I have seen various references in this forum and in Cisco documentation to upgrading the MARS signatures using the Admin>System Maintenance>Upgrade path. I am currently running release 4.1.4 and was wondering if there are signature upgrade packages a...

Hi All Expert,If I need to buy extra 1 year Antivirus subscription for CSC module in ASA5520, which part number should I used in Cisco? Or I need to order from Trend Micro directly?Thank you.Rgds,Au Yeong Shaw Voel

can anyone just tell me that on PIX 515E is it important to have a global statement, meaning i have few ip address given by service provider out of which we have one setup for the global statement in pix. also we have NAT for different server. proble...

I'm pretty new working with the Cisco products, however I have the privledge to test the ASA 5520. I'm unable to ping the outside interface from the inside network. I'm unable to go out to the Internet. Any help is appreciated. Here is my config:...