Network Security

Hi! I have a ASA 5520 With AIP-SSM-20 and I have a question about Application inspection. I am not sure about the features in the command “class class-default”. Is the match default-inspection-traffic and the inspect command associated with it, unnec...

Hi. Does anyone have any information as to how best to use thin client conmputing within a NAC regulated environment? I wish to implement NAC to secure my laptop/desktop population, but want to know of any ideas when it comes to thin clients and pr...

Please,How could I enable pptp through pix, without problems, time outs, warnings, etc..The client VPN is in the inside and the server is in the outside.fixup ?access list ?static ???To reach the outside there are two firewalls pix.Thanks.

I have upgraded 6.3.4 to ver 7.0.4 to use pix 535 in transperant mode. I just want use one network on this box. Please help me to configure this.

Hi,I have 5 networks with 2 routers behind PIX 7. I tried to assign route to different Networks located inside Pix in Pix. A Sample configuration isroute inside x.y.z.0 255.255.255.0 a.b.c.1The local segment has inside interface of PIX as the default...

Can I use a dns entry instead of an IP address (208.134.161.5) in the following:access-list inside1 permit ip 10.0.0.0 255.0.0.0 208.134.161.5 255.255.255.0

I've spend many hours over the last week working on intermittant sensing interface failures on our IPS sensors (models 4235,4240,4250,4255) after an upgrade to 5.1-1a. I even rebuild 6 sensors from scratch using an 5.1-1a ISO image, and 5 out of the ...

I have a 501 with the 6.3.4 os. I had set up a logging host thusly: logging host inside 192.168.1.4It was working fine but I needed to change the IP address of the logging host. I thought if I just entered the same command but with the new IP it woul...

Hello, is it possible to have the ASA 'listen' on two public IP addresses, but connections initiated TO either of those public addresses are directed to a SINGLE host behind the firewall?Also, the connections would all be going to a single service (t...

Hi GuysIs it possible to log SYSLOGS from an ASA to Security Monitor? I currenlt have an ASA that I have configured to send syslogs to a VMS box however the events never seem to appear in Security Monitor.I'm sure I've done this before with a PIX 515...

After having worked with an AIP-10 for a while I was wondering if there is a way to import/export signatures. This would of course be primarily custom sigs as there is little use in exchanging what we all have in common. I did not find it in the GUI....

Hello, We recently upgraded our 4235 and 4240 up to 5.1. Both sensors were previously runing 4.1 code. Now, the sensors will stop sending alarms after a random amount of time - one sensor shows the analysis engine not running, the other does - howeve...

I am trying to produce a report to identify which clients are TFTPing traffic to a particular host and then quantify the amount of data being transmitted. These statistics should be available via the Netflow data being exported to the CS-MARS System....

Hi, I just got my ASA 5520 firewall with (ASA SSM-20 module), and would be grateful if anyone could inform me about these questions concerning IPS features.1. in the signature configuration of aip-ssm most signatures are set with action “produce aler...