Network Security

We have VMS 2.2 installed and using "Management Center for Cisco Security Agent" portion of it. We have purchased 2 CSA licenses and have already uploaded them to the MC for CSA. I'm still receiving "Warning : Management Center for Cisco Security Age...

I wonder whether there is any possibility for NBAR to match more than 16 ports for each type of protocol (for example fasttrack)? The problem is that for example imesh is using ports between 1024 and 7000 !!! I successfully managed to block p2p appli...

Hi, I have a PIX 525 running vers 6.3(1) andwould like to disable timeouts for certaintcp connections passing through the PIX. Oneof which is ssh. Looks to me like the onlyway to do this is to set "timeout conn 0:0:0"which disables timeouts for all t...

Is there any recommendations for a simple tftp software so I can upgrade my pix pdm to 3.01.any links or suggestions would be appreciated

If I take a 7960 and put it outside of a PIX and modify the cnf.xml file to point to the NAT'd IP of CM and open port 2000, should I be able to pass calls through the PIX? I can get it to register with the CM, but when I make calls, there is no voice...

I am configuring a PIX 515e. Want to deny all outgoing traffic but the ports I allow. I was trying to configure a service group to use inside of PDM for web traffic. I add http and https but the rule does not work.I can deny all traffic but to try an...

I have a PIX FWSM in a 6509 connected to two seperate upstream border routers. If I apply two static routes pointing to the two routers, will they load balance?

Hi,Has anyone else experienced an abundance of problems in LMS 2.2? I've done two installations so far for different customers, and have got nothing but problems and bugs. This is very disappointing, considering that LMS 2.1 seems more stable.Am I al...

The problem I encounter is when I use the PAT through outside interface, my database segment unable to resolve name and surf internet. When I change it using another public ip for PAT, then it works fine. I did check through bug tools kit, but nothin...

When failover occurs:Does VRRP replace the IP address on the backup device? Or is it an additional IP address?

Can VRRP fail back to the original master automatically? I am referring to the preempt option of HSRP. Is there any equivalent function in VRRP?

Having a strange issue. We've opened up ssh & PDM on the outside interface to manage the PIX by specific IP addresses.The PIX will not allow an SSH session until we initiate a PDM session (either internally or externally). Once an attempt is made wit...

My pix should set up a vpn tunnel to a third-party gateway using pre-shared keys. IKE phase 1 fails, because the other side delivers its FQDN as isakmp identity. Therefore, the pix cannot find the required pre-shared key.How do I have to configure my...

does anyone know where i can get some information on reading a debug for apix 515e i ran a debug packet inside and need to read it

One of one clients has a dedicated Apple Mac environment with Pix 501 firewall. They use iChat AV for Audio/ Video conferencing. The connection fails everytime a session is started to anyone outside the company.iChat reports: Tried to send UDP SIP "i...