Network Security

Dear guys,I work as a Network Security Administrator for an ISP. We have two failover bundled PIX 525 firewalls with version 6.3(3). Recently the cpu usage of the firewall become nearly 100% denying accecss to our services from outside. After failing...

My PIX 501 has been running like a champ for the last 6 months but today when I came home, all of the lights on the switch portion were off. The power light and the light for the 0 port were still lit up but none of the lights for the 1-4 ports were ...

I am trying to move a remote site's vpn connection from our pix to our concentrator, but it doesn't appear that the concentrator allows for a 0.0.0.0 peer address. How does the concentrator address pix devices that use PPPoE?Thanks for any and all as...

I believe I know the answer, but I wanted to get opinions. I have read that a dedicated switch is required, but I have also seen the documentation mention a crossover cable.Is it necessary to have a dedicated switch between the Primary and Secondary ...

Hi, I have a few questions regarding RRI and HSRP. I think I have the jist of this, but would like to run it by someone.In the attached diagram, I simply have two Internet connected routers (Router A and Router B) that will establish IPSEC tunnels to...

I have a IPS in the border and have qualified deny packet, deny connection and deny to attacker for the signature of NetSky and have noticed in my internal antivirus that the IPS this not blocking NetSky. The antivirus detects W32/NetSky.p.em What I ...

Version 4.1(5). Is there a global way to tune by IP(s) such that the IP(s) continue to show up, but never alert? Example, for IP 10.0.0.1 I want no alerts for any signature, but want to see the events.

After upgrading to VMS MC to 2.2, we need to add new sensor to MC, but it does not seem to work. It actually went through the "Add Sensor Summary" screen. Click Finish. No new sensor added to the Management Centre of IDS Sensors. No error message wha...

Hi, a couple of questions here, firstly I understand the uauth settings on the pix are as follows:timeout uauth - 5 mins - Sets the duration before the authentication and authorization cache times out and the user has to re-authenticate the next conn...

Hi, I have lead an error " Analysis Engine is currently busy apply update later" while upgarding 4.1(5)sensor with signature 4.1(5)S195. please let me know how to get resolve this issue.ThanksMasood

I am running 4255 platform with version 4.1.5. This has proven to be a real nightmare to update signatures. Before we do any updates we have to be careful and remove the previous updates so that it does not fill up the slice and dies. Even by doing t...

Hello all, I have an IP Phone on Inside, the IP Call Manager is located on the dmz, all the the ports are open between this two devices (permit IP), moreover, I can ping one device to another. But the Ip phone is unable to make a call, no dial tone. ...

Folks, I am looking at the log files in my VMS server and they are much bigger in size than the recommended values, am i use to manual clean them up or can i automate the process.Thanks

HiI just upgraded from a PIX515 to an ASA5520, every thing works fine except that behind the ASA are HTTP servers and users need to upload and dowload JPG´s that is done through HTTP, when the files are large it just stops half way through the downlo...

When trying to upgrade PIX 525 from ver. 6.3(4) to pix702.bin via the "copy tftp flash" command I'm getting "tftp: Timed out during transfer". Tried differnet servers, differnet TFTP clients & even tried differnet images (pix702.bin, pix702-5.bin)red...