Network Security

Hi allI have the same problem as many other, with internet access via a VPN client.It's solved by folloving the "internet on a stick" conf examble.BUT --- it gives a lot of errors in the log like :305005: No translation group found for udp src outsid...

Hi all,I just got an ASA 5520 VPN Plus and I'm having trouble blocking p2p and im programs.The problem is when I block p2p and im programs, no other web sites work. Here is my config below.ASA Version 7.0(1)names!interface GigabitEthernet0/0 nameif ...

What's the equivalent PIX7.0 command for the PIX6.3 command 'debug packet'

Dear all,The pix515e is configured with one public ip on the outside interface,and PAT configured so inside users can access internet.our mail server and web server is registed with isp.currently the mail and web is running on same server.i can send ...

It seems that the newer 7.0 ASA/PIX OS does support the inspection of the Gnutella protocols like Limewire. The older PIX OS clearly stated you had to use NBAR to filter it out. But I see no mention of anything other than Gnutella and wanted to ensur...

I have an issue in that we have a pair of Pix's (version 6.3) and a router plugged into a switch. The firewalls are ours and the router is a customers. We have static routes on the firewall to the customers networks off their router however if the li...

I am having an issue where the AnalysisEngine will not stay running, as i am looking into this i see available disk space (100% usage), could this be part of the problem? how do i free up space on the ips?Here is the show verUsing 1150967808 out of 3...

HiI was wondering if it is possile to monitor the diskspace on the partitions of the sensor by using the built in snmpd on the IPS 5.1 sensor appliance. When i try to snmpwalk the sensor i cant see the usual net-snmp stuff.The "cisco.ciscoMgmt.ciscoC...

Is it possible for a Windows 2000/XP user using the Cisco SSL WebVPN client software from a VPN 3005 concentrator to logon onto a Windows domain or active directory and run their logon script? In the IPSEC VPN, you could do that before with the "Ena...

Starting this thread to gather inputs on creating custom HTTP signatures to detect specific URL sites. Has anyone used the regex in IPS 5.x to specify certain web URL to log or deny ?Ex: Signature that can detect, log or block www.yahoo.com

SENSOR-01# conf tSENSOR-01(config)# service hostSENSOR-01(config-hos)# netSENSOR-01(config-hos-net)# show settings network-settings ----------------------------------------------- host-name: SENSOR-01 default: sensor telnet-option: disa...

I have updated our various IPS sensors to this latest version. Many [or all] of them seem to be caught in a loop where they are reinstalling IPS-K9-min-5.1-1a.pkg. Anybody else having this problem? Is this a known issue?

Hello, i bet this has being asked many times, but i cant seem to trace any.this is my network.pix501 -> noncisco switch -> catalyst 2950.I want to configure three VLANs on the 2950. What would be the configuration on the pix to route the vlans. Thank...

HelloI have my PIX 515E Restricted (16MBRAM/8MB)- 2 Interfaces.I like to implement:- 7.0 OS Software- Failover- Out of Band Management InterfaceIt's correct that I have to buy:- Upgrade License to UR for my PIX- 1 new ETH Intefaces- 16MB Flash / 64 ...