Network Security

Anyone come across this one? I have a network monitoring station in my DMZ that monitors devices at a customer site. I can see all the internal devices fine (using SNMP polling over the VPN tunnel we have created to the site). I want to SNMP query th...

Hi, I've a problem with a pix 501. The ethernet 1 port probabily have an hardware problem, because even if I put a cable in one of the four interface the link is always down. I've upgrade the unit to firmware 6.3(5) version but without result. How ca...

Anyone know how to import a certificate signed by a public CA like thawte or verisign for using secure-http-client through the pix.Thanks.

EXISTING SETUP: My customer is on a flat network on a certain OSPF Area. ABR connects the area to the OSPF AS. THE PROBLEM/QUESTION: Iam now inserting the PIX 515E UR between my customers network and the ABR. Do I need to implement OSPF on my PIX eve...

i have PIX 515 firewall, i have the following problem:consider the following:inside interface: 1.1.1.1/24DMZ interface: 2.2.2.1/24outside interface: 3.3.3.1/24Access-list 10 applied at the inside interface.access-list 6 applied at the DMZ interface.A...

Hello,I have just bought a cisco 877W. For some reason SDM says that the IOS is not supporting QoS and IPS. I have upgrade the IOS to the latest 12.4 (advsecurity), but still no supoort for Qos and IPS. According the information from Cisco it should ...

Does anyone know when NAC phase 2 and CSA 4.5 will be released?

Hoping that you maybe able to help ?.I have 2 x PIX (515) Firewalls in failover configuration, I need to connect an ethernet switch (C3560) split into 4 seperate Vlans to a single interface on each of the firewalls.Basically I have 4 3rd Party vendor...

I already have a site to site vpn set up with a branch office, and all of the traffic that is defined in the ACL traverses the tunnel. My question has to do with Internet related traffic. Is there a way that I can define all internet traffic to go th...

Hi, We recently had to re-install VMS due to a corrupt database. We actually fdisked the hard drive reinstalled Ios with the appropriate patches and reinstalled VMS. Everything has been smooth until I try to upgrade the signatures on my sensors. All ...

We want to enable some customers that are NATed off te inside 10.0.0.0 network to be able to ping and traceroute to destinations outside the Pix. They can traverse the Pix for all other traffic, such as web and email. Customers on the public networs,...

We were testing ips which seemed to break comcast and cox cable users from loading our website. A user from any other isp was not effected. Anyone have an idea?I had roughly 150 signatures enabled using the generic attack-drop.sdf on a 3725 with 256 ...

Newbie here so go easy on me.. I am pulling my hair out on this.What is the proper way to create an event variable for addresses outside my networks? Ie: internet addressesThanksDan

I have a test web server inside our DMZ that accesses a sql server on the inside network. The problem is when I create the access rule access-list DMZ_inf_in permit tcp host 172.16.10.250 eq 1433 host 10.10.2.28 eq 1433 and create the static routesta...