Network Security

Hi everybody,I’ve a few questions about ASA with AIP-SSM. Could you please clarify me?1. Is the management interface of AIP-SSM necessary? Can I use IPS feature without it?2. Can I use ASA as an IDS box? I mean just for sniffing traffic only. How can...

Hi to everybody. Yesterday i've posted question about load balancing across 2 pix 525 firewalls. Question was this:***I'm creating network solution that ***will have two Pix 525 firewalls ***connected to two different ISPs. For ***performance reasons...

Hi,I have the PIX 525 Falover pair configuredd and working fine then I upgraded the pix os 6.3 to ASA 7.0 OS. Now the failover function is not working. In the active unit sh ver shows as active/active with UR license.In the failover unit shows active...

I am trying to get sharepoint services to work through the WebVPN on our ASA 5520. We are using passthrough authentication on the IIS of the sharepoint. Is there anything special I need to do to get this particular configuration to work? The closest ...

Hi I have one pix in my local LAN. so i have created one zone for servers, and second zone for some users and third zone for some other users. Now i have installed cisco call manger 4.1 and it works fine if phone and ccm are in same zone, but i want ...

Signature 5045-0 (WWW xterm Remote Shell Access) fired an alarm with "log pair packets" enabled. I cannot provide the trace for confidentiality reasons. Here are the regex from that signature:Arg Name Regex: term([ \t]|(%(20|09)))Arg Value Regex: [-]...

hi,I have PIX 506e running 6.3(1) i'm unfamiliar the pix and it's CLI. I want to add static routes for two internal networks.172.16.0.0 255.255.0.0 10.200.0.0 255.255.0.0Can anyone give me an idea of what the command line for this is. I would really ...

Am I missing something or is the "show management-access" command no longer available in PIX code 7.04 and 7.1?DCSSwedenPix(config)#show management-access ^ ERROR: % Invalid input detected at '^' marker.DCSSwedenPix(config)# "management-access inside...

Hi all,has anyone implemented a Pix in a NAC2 environment yet ?My Client should connect with the Pix thru VPN, and then authenticate with nac2. (802.1x and L2-IP)I'm not really sure how to start correctly, if somebody has an advice or links to relate...

I have a PIX 501 thru which I need to forward traffic from the outside to two servers on the inside network. My outside address in this case will be xxx.xxx.xxx.xxx and the inside addressing range is 192.168.125.x and I want to allow remote assistanc...

Hello,I'm a real noob here so please bear with me.I have been able to configure my PIX 515E to allow VPN connections onto my network, but what I need to do is set up some sort of user authentication to control access at a user level. From what I've r...

I'm trying to setup a DMZ host to have access to a public interface translation for a host in another DMZ. Is this possible on PIX? For example:public IP for dmz_b host 192.168.1.5dmz_a host 10.1.1.5dmz_b host 10.1.2.5I'd like to configre dmz_a host ...

Hi What do I do if our VPN clients complain about the link being slow and the connection dropping off.

I installed the S219 updates on one of our client's IDSes. After the install, the eth0 (sniffing) interface started bouncing. I'm getting the following errors constantly (i.e. 2300 in 2 hours)evError: eventId=1084139354956127055 severity=warning orig...