Am getting the syslog messages flooded with error 106023. The recommended action says "could be port scanning or foot printing attempt". How to go about on this?
Hi, I am wondering a little about control plane policing (CoPP). When should it be implemented in an enterprise network on the router? or border router? is it best practice to always have it configured? According to some secure IOS templates they d...
Hi. Does someone have a solution to this:A service provider offers firewalls to his clients. Every asa si monitored by a MARS. If the clients use the same subnets in their Local networks, how can this be solved in MARS.I mean, in the topology dashboa...
Hi,Can any body tell me how can Limit ICMP Payload. Like in my network no one can ping will more than 64 Byte. If anybody ping lets say with 100 Byte then the ping will be droped. Any doc or suggestion would be appreciated.RegardsAdnan
If I setup an ASA 5500 at a remote site to do Site-to-site IPSec VPN, can I have the remote ASA report to the local MARS through the tunnel? If so, what address would I use as the reporting address in MARS for the 5500 appliance?
See attachment---This DMZ was created before I started here...it goes back into the core switch...Any idea why they would do that, is it secure?I want to create another DMZ, I have purchased two layer 2 switches (going to team the NICs, one NIC on ea...
Hello all,I am trying to apply an extended ACL on an interface of C8510 MSR with IOS Version 12.1(27b)E3. This is what i getC8510_CYB(config-if)#ip access-group 102 outWarning: Could not apply ACLs on FastEthernet0/0/4I reapply the access-group comma...
Yes I've gone through this article:http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a0080702992.shtmlI can't seem to get it working. I'm getting NO TRANSLATION GROUP FOUND FOR TCP... when I try testing using a UNC path t...
we have an ASA 5540 that require LAN port for failover. And the only available interface left is the management port. How to config management interface to an ethernet interface?
Does anyone know how to or if it's even possible to use a different split tunnel ACL for one single VPN profile depending on which interface is being used as the VPN end point?
I may be on the wrong route here, but I am setting up mars for the first time. Now that I have a couple of devices sending logs and netflow, how do I hide the hight traffic ports in reports that I know is regular traffic. Like in the system report,...
I have a L2L tunnel setup with one of our customers which we do development work for. We have hired some external consultants that need to work on servers that are located at the customers site. I am curious if it's possible for the consultants to ...
Hello,We currently have a DMVPN network setup and ip is working correctly but we are trying to make IPX work and we have not been sucessfull. We have setup IPX on the interfaces and we are able to see the servers but we try to connect via RConsole an...
Is the anyway to add a domain name in the seed file for the username when adding Windows Servers which are part of a domain. When you are unable to use the 'local' admin account. An Example would be : Server : mailserver1.cisco.com Domain Account ...
