Network Security

Please feel free to correct me but as I understand policing on the current version of the pix."Policing is applied only in the output direction."So we can only police traffic which is leaving the pix. So in my secenario I have 150 vlans inside my pix...

There's tree in Cat4000(IOS) MIB, that contains list of modules (with model name, s/n etc.). It looks like this (for module model, but the same goes for other info):$ snmpbulkwalk -m /dev/null -t 10 -v 2c -Osqn -Iu vdcs09c -c ******** .1.3.6.1.4.1.9....

Router outside ASA has connections to two providers and I am given a subnet of 16 IPs from each.If I try to configure a second static NAT on the ASA with a different real ip but same inside ip I get 'duplicate NAT etc..' Any ideas ? I need to configu...

I have seen this config in one of the examples in cisco sitepolicy-map mqcp class hub bandwidth 200 police cir 5000000!Please help in understanding the bandwidth and police command setting in this example

I can't perform traceroutes over the VPN tunnel I have established.. everything is working otherwise.. I hit up TAC with this question, and they tell me that because the packets are encrypted, that the tunnel isn't aware that they are traceroute pa...

Hello to All,We are trying to upgrade a PIX 515e from version 6.3 to version 7 using TFTP or Monitor mode and everytime we transfer the file the cursor just sits there and then a timeout message appears. The TFTP server shows 100% transfer but the P...

Hi,Is it possible for the local Trust Agent (on the PC) to launch a browser window when the System Posture Token has certain value e.g. Checkup ?We want the user to be re-directed to a AV server if their Virus defination are not upto-date by launcing...

Folks, Does anyone know if VMS 2.3 can be installed on 2003.Thanks

Hi,I've a client using SAP OSS. With 6.3(4) is ok, but with 7.0(2) doesn't work.I see this message: %PIX-6-106012: Deny IP from XX to XX, IP options: "Router Alert".SAPRouter use source routing.Cisco IOS command "ip source-route" allows handler the f...

Is it possible to use PIX 506E to allow a persistence tunnel and route certain IP to tunnel and rest of the IP to Outside interface or to a router? I have attached a gif file to elaborate my need. Any help on this is greatly appreciated.Thanks

I would really like to speak with some medium/large customers who have deployed CSMARS, particularly those who also have deployed Cisco IDS/IPS. I am in the middle of a proof-of-concept and would love to compare notes.If interested, email me at hellm...

Started seeing a lot of "land attack" entries in our firewall log:%PIX-2-106017: Deny IP due to Land Attack from 0.1.0.4 to 0.1.0.4Asked our ISP if they could block these in their routers so they wouldn't even hit our firewall. They said they put in ...