I have a GC V6.0.1 with a single LC6.0.1 that seems to be running fine, however the GC is not displaying any statistics fromt he LC. The LC is receiving about 10K netflow events per second and they show up fine on the LC interface. However the GC hom...
When a Windows user log out of their PC (which has already been posture assessed and placed into the appropriate access VLAN) but doesn't shut down or reboot, is there any way to notify the CAM of this and 'move' the switchport back to the auth VLAN ...
Hello all, The rule System Rule: Client Exploit - Mass Mailing Worm, fires quite often in my setup of mars, and I havent really been able to setup any trends, as we have a large base of legit mail traffic. Im worried I will filter out legit mail IP'...
We have a PIX facing the Internet and recently introduced Websense for URL filtering. The method we use to send the traffic to websense is using a SPAN port on the core switch's interface that the INSIDE interface of the firewall connects to. This ...
Hi all, Here is the scenario: We use DHCP on our network. machine A connects and receives an IP address. We want to locate where that machine with IP x.x.x.x is connected at. How can we track the MAC (or IP) to an access port on a switch? The termina...
Hi. I have a 2811 that I want to use as a IPsec, VPN Gateway. I'm using the SDM CD that came with the software. When I run the Firewall Wizard to create my security profile, it won't let me move the slide-bar up to "High" for maximum security. It def...
HiI have defined a PKI trustpoint on 871 but whilst authentication CA i get the following error:Nov 6 10:57:05.370: CRYPTO_PKI: Sending CA Certificate Request:GET /certsrv/mscep/mscep.dll/pkiclient.exe?operation=GetCACert&message=Synergy-CA HTTP/1.0...
Hi allWe're having problems with IPSec tunnels going down and not coming back up by themselves since the upgrade to 7.x. We never had this problem on 6.x, and connections to other manufacturers' VPN devices as well as IOS devices appear to be affecte...
Hi, I had a problem this week in the network. A host was plugged in the network with the same IP address of the default gateway of that Vlan.Is there someway to prevent it? I know with 802.11x I could know who is doing that, but it would not avoid th...
Would like to block scanners OS fingerprint detection (windows). Is there any url, hint, procedure that can be done on CSA to perform such.thx for your help.
Hi,How beneficial is CoPP in the context of device hardening?What are the drawbacks of applying CoPP on an Internet Border Gateway.Is CoPP approach analogous to IPTABLES INPUT/OUTPUT chains?Thanks for your thoughts.
