Network Security

Hello, We have a customer who has an iprism web filter which I thought was only doing content filtering. After installing an IPS 4215 to monitor web traffic, the only alarms that generate are http connect alarms from the inside hosts to the iprism, i...

Please help i wish to capture successful traffic on a Pix firewall 515e between two interfaces on the firewall, does anyone know how or what software i can use. Syslog can only monitor unsuccessful traffic

After I setup a Cisco 4240 IPS, I tried to access the appliance's IDM web portal. Unfortunately it would not connect. I read through all the troubleshooting documents and even read through these forums and none of the proposed solutions worked. The c...

The PIX is cofigured with no nat-control.When traceroute/tracert from PC to the server behind the PIX. The server reply but the missing part is the PIX interface do not reply at all. it just passd thru.How to get PIX interface respond to the tracerou...

Hello,I need some real-life facts about VPN 3000 concentrators running more than 1000 concurrent IPSEC VPN-RAS sessions. We are seeing very high CPU utilizing with limits about 100% at 1600 concurrent sessions on a VPN 3060. The question is what can ...

HIDoes h323 inspect handling configuration where h323 setup comes outside to inside or inside to outside, but GW where media stream is negotiated is placed behind the third ASA interface ? See attached topology picture.rgds,Ismo

I'm upgrading an IDSM-2 from v4 to v5. Do I want to use 5.0(1) or 5.0(1a) as a step to 5.1?

Hi,I get the attached error message when I try to add a device (ids-4215)to the IEV 5.0. Is there any dependencies for java certificate for this IEV sw ?regards rolf

I found many fram drops:gpix# sh asp drop Frame drop: Reverse-path verify failed 282 Flow is denied by access rule 619 Out of flow cache memory 102 First TCP packet not SYN 813 TCP failed 3 way handshake 254 TCP RST/FIN out of order 44 TCP SEQ in SYN...

I have the following config:global (outside) 2 CLIENTA_NAT_ADDRESSnat (CLIENTA) 2 0.0.0.0 0.0.0.0Where '0' indicates all networks - Yet for some reason, one of the Subnets connected to the CLIENTA VLAN was generating the following error:No translatio...

I am dealing with 2 domains owned by the same company. DomainA and DomainB are connected via pix 501s ipsec tunnel. Right now all the tunnel is being used for is passing mail. DomainA has an application that need to communicate with the workstations ...

Hi,We have an ASA-5520 that is use for our remote VPN users and I've set it up with multiple DMZ interfaces (vlan). There is a Microsoft-ISA server between the ASA and our internal network and this ISA has interfaces that matches those on my ASA serv...

FTP client request cannot a connect to FTP site. Looks like the FTP client display says connected, but after 45 seconds the client retries to connect. FTP FIXUP 21 is enabled.FTP site admin says it's passive FTP. We are making the request from inside...

I have recently had an application move from one server to another. Is it posibble to simply redefine the "names" statement to use the new IP address?eg: previous statement;name 10.1.1.1 WEB_SERVERproposed statement;name 192.168.1.1 WEB_SERVERThis wo...