Network Security

Hi,I have packet captured showing all of my GRE packets with an IP PREC of zero, and the internal header marked IP Prec 5. Every document I've read states GRE copies the internal header upon encapsulation. I've removed every QOS except the LAN inb...

I've just upgraded my Cisco Pix from 6.2 to 6.3(5), but now I'm trying to upgrade PDM from 2.0 to 3.0 and every time I try to tftp the new PDM file to the firewall it looks like its installing and then I get an error stating " No PIX image found in d...

Having a problem here on a 506 6.3(4) that the user says popped up out of nowhere one morning with no changes having been made to the config. There is a 506 a layer 2 dumb switch, and then 1 internal server hanging off this switch. the PIX can ping...

Hello!I have got one question about the purpose of IPS licence. If I correctly understood, licence should assure you to obtain signatures, so that means if your licence expires, you will not be able to apply signature to the sensor. Am I right?I try...

Good morning I'm writing you because few days ago the Cisco Pix appliance, installed on the network of my Company, had a crash.Few seconds before make statefull fail-over (with the standby unit), I could capture the last log messagges and I send you ...

I have a recently re-imaged 4255 sensor with V5.1.1 installed. The sensor app continually dies for no reason and I am constantly having to login with the SA and restart the cids process. Any ideas/recommendations?

Hello,I'm debating whether to go with a 515e PIX or 3825 router w/ FW IOS. What does the PIX offer that a FW IOS cannot do? I am leaning toward the 3825 because I am much more familiar with IOS. Thanks!

Hi,I have a ASA5520 with one internal, one DMZ and two outside interfaces to be connected to two separate ISPs routers.I would like to use both ISPs for internet traffic in one of these ways:A) Route traffic based on source IP (separating desktop and...

I have a network setup as follows:-Internal 220.0.0.1VPN users pool 172.20.0.0We can connect via VPN and see internal network.I want to enable split-tunnelling.I have the following IPSec Rule setup:-ProtectTunneling Policy ODynamic2...

I need to replace a pix 506E with an ASA 5510. Since the pix 506 can't be upgraded to pix 7.04ED software, is there a way to convert the pix config to the ASA equivelant? There needs to be a utilitiy like there is for the conduits to ACL's. Anyone...

My 6509 reboots the IDS module from time to time, switches log says module is "not responding to polling." After reboot module seems to go back to normal operation. Module had been running fine for approx. 2 months. Any Ideas??