Network Security

Hi, I have problem to find information how to setup policy-based routing for pix firewall.I need a link or a configuration example.Thanks Niklas

Hi,I have Cisco Pix 515E-UR-FE, is it possible to configure 2 uplinks Act-FO(using different route metrics), with seperated firewall rules based on each uplink?Thanks in advance,Shai.

Dear experts,Just needed to know 1 small thing. I don't know whether this is a known Cisco bug. The problem is that even a non-admin user having READ-ONLY or MONITOR privileges on a PIX 515E firewall can login & change his/her access privileges to th...

Before version 4.5 of CSA, it was very easy to allow or disallow users access to the User Query boxes. Most users don't know what this information means, so why bother them? It seems that now this feature is set up separately on each policy or module...

I'm checking out using PDM on a 515 but when I enter my login name/pw which is what I use when I use CLI, it rejects it. Wouldn't the name/pw be the same or am I missing something here?

Hi, I'm trying the IOS IPS solution out in a lab environment and I seem to be getting lots of false alarms on sig 4050 - UDP bomb. Looking at the signature description via go/mysdn, and looking at it's configuration on the router via SDM, I can see i...

Sir, i got 1721,1841 & 2851 series router,515E pix,2900 & 3700 series switch. i want to inplement cisco network management software, so which is best for this device.

Hi,We are planning to use NAC to check the security patch level\hot fixes etc at the end-point and then perform "automated remediation".Many products that i looked at involve some level of User-Interaction to perform remediation\apply fixes etc. Is t...

I been searching around the command to stop or terminate a tunnel instead of reload the unit. Anyone can advice me how to procees abt this?Thank you very much.

I'm getting a message saying my Server Certificate Expired when I use Management Center for IPS Sensors.I found bug CSCsa88926 that has Workaround:Generate a new SSL certificate:Stop the daemon manager (net stop crmdmgtd)From: $INSTALL_ROOT\CSCOpx\MD...

Hi,As I imorted my 5.x IPS sensor into my VMS system and click on the IPS 5.x Signature page, the following message is showing:Object loading failed. SignatureGroups(boolean): Unable to load and parse signature groups document. I tried to re-importor...

I recently upgraded my PIX from 6.1 to 6.3 and upgraded the PDM. The PIX ran fine for a week and then just stopped passing traffic and could not be polled or connected too. After a restart the PIX will work. This has happened several times sometimes ...

I have created a “SigEvent Action Filter” to filter all TCP syn host sweep (3030) from a single host to a defined variable "set of IP addresses". The filter appears to stop alerting on all of the events except the summarized alerts. These alerts are ...