Network Security

To connect to the command-and-control port on the AIM-IPS module on the ASA5520, does one have to physically connect the port to the switch?The g0/1 port on the ASA is already connected to my network and I was wondering if I can access the IPS Web se...

Dear all, i am setting up an exchange front end server in dmz and backend server in inside area of pix. i require to open a range of ports (say 1024-1600) for RPC using accesslists from dmz to inside. Plz help me thankssavad

10 days ago I installed ASA 5510 at a site. I was using image 7.0 (2). Static translations on a DMZ interface didn't work (I know PIX OS very well so this is not due to misconfiguration ) while dynamic translations worked. I upgraded to 7.0(4) and fa...

couls anyone pls clarify the differnce between asa 7.0 and pix 7.0 ios . i checked with the command reference . bo the ioses have the same commands. i guess the only difference between the two is that the asa can have a inbuilt antivirus and ips engi...

i have a pix 501 located at a remote location. i want configure it for telnet access from outside.i want to know how can i do it.can anybody help me.regards

Good morning,I'm getting an Alert in CSA, generated by Rule 18, stating that "A portscan was detected Reason: ICMP unreachable. ICMP: 10.64.100.101 -> 10.65.110.118 type destination_unreachable/03. The target address (.118) is a voice gateway on a ...

i have a pix 515E . in the monitor mode i speicfy the interface connected to the tftp server . i have given an ip add of 4.1.1.1 and the tftp server ip address is 4.1.1.2/24 . from the monitor i specify the server as 4.1.1.2. i can ping form the pix ...

Ok, so I have a pair of 515's running 7.04Basically all users sit on Lan called Bpoint_users. These users as they hit their interface go into a VPN. The only traffic which does not go in the VPN is a file server and a printer. The traffic going thru ...

Hi we are using the latest ips mc and also the automatic download feature for signatures.till s206 no problems but since 207-208 i get the strange error message:Updating MC database with meta-data from signature update packages...A sensor update for ...

if i have an ASA with the SSM module and i have vlans configured on my LAN, how will i detect intrussion on the vlans? do i still need the ids?thanks a lot

I have this problem with my PIX 525 running version 7.0(1). almost every packet being sent or received by the pix for PATed traffic is retransmitted or receives duplicate ACKs. I've seen this reported as a bug on version 6.3 but not on 7.0(1)Traffic ...

I have a pair of 515E which I want to run in FO and I want to run them both on 6.3(4) initially to one for one replace an existing install (of 515).My UR box has 6.3(4) loaded and running. The FO box shipped with 7.0.Q. How do I force the FO box back...

Folks, Planning to upgrade a pix 515 R to 7.0 code , not sure if it will support multiple context, i need that feature? do i need to upgrade the license first to UR?

I have a router configured with Nat on Stick. I need to setup a vpn tunnel from the router to a pix.Is this possible? Since I am using nat on stick, and there is no public address on the rouer.If so, please point me to a sample config if possible.Be...

I am using PIX 501 to setup a VPN. At first the VPN client cannot access the internet once they logged in via the Cisco system vpn client, so i enable split tunneling. Now the VPN client can access the internet but they can't access the internal netw...