Other Security Subjects

Hello, I configured the zone based firewall as shown below (it is a C2811 router).Topology is:Webserver(IP:10.2.0.100)----layer2switch----(fa0/0 IP:10.2.0.1) C2811 (fa0/1:10.4.0.1) ------------layer2switch---------clientPC(IP:10.4.0.4)Behavior:Before...

HI allwhat would be the MARS replacement solution? what Cisco tool, I need to correlate the different security alarms?regards.                  

Hi,I am trying to create a solution what would consist the following:Avaya hard phones would vpn into the corporate network. Vpn authentication would be based on certificates. As I getting into the implementation I found out that one of the key point...

We have CSM 3.3 installed as well as ACS 4.2. I recently performed the CSM/ACS integration and was successful, at least that is how it looked. Now on the home page I see "Authorization Mode" with ACS in "red". When I select it I get this message "Cis...

I have never worked with a cisco router and am trying to help a very small company.They have a 506e Cisco router and am trying to create a static route from a specific outside address to a IIS server on the inside using http. Thank you in advance Dav...

Hopefully im in the right forum, apologies if not.Simple question really - studying for CCNA security, CCP seems integral to it, but im confused as to which router models can actually use CCP for configuration. I noticed a post by Wendell Odom sugges...

Hi, everybody! I`m gonna use port security on my switches. What happens with interfaces that are not currently used, but I will add to them port security and someone new connected to him? How best to configure port security on trunk port?

Hi Gurus,Let me know, if you have a link will be excelent, the different if we capture traffic in Real Time (using Spam Port) or export traffic by Netflow protocol.When I capture traffic and analysis it (using Wireashark or TCPDump) in Real Time I se...

Dears,I need your help in generating the SSL Certificate for the CSA, i have followed the below procedure:1. net stop csagent 2. cd program files/cisco/csamc/csamc60/cfg   delete files sslca.crt,sslca.csr, sslca.key, sslca.sn,sslhost.crt, sslhost.csr...

       sd

We are currently using 3560 switches in our branches. We are in the process of implementing port-security on all these switches. In our testing we have been using sticky. The issue has come up with our remote users that travel from branch to branch w...

Scenario, my server x.x.58.14 from one of the public subnet assigned by ISP cannot be accessed from DMZ guest wireless subnet (using GWC) which is natted to different public subnet (x.x.68.19). However the internet works fine and remaining services f...

Hi,I have Cisco ASA 5510 with CSC-SSM-10. ASA anti-virus service can not update the Base and Plus lisense. No Activation Code required for renewal. I go to "Administration> Product License" in the CSC SSM console and click "Check Status Online" to ge...

Hi everybody,I'm working on creating a tunnel between an ASA 5505 and a box running Check Point NG/AI. I've set up a couple of other Cisco to Check Point tunnels with this same Check Point peer without any problems. This time however, a SA is never...

Does the "no ip gratuitous-arp" command affect gratuitous arps sent by the router (for example, when hsrp causes a secondary router to assume role of primary) or does it affect gratuitous arps received by the router (for example, gratuitous arps with...