Hi,I syslog to a Kiwi syslog server, and rotate the PIX log files every day. I discovered that the daily log file size is now averaging 10 times what it was in June.After looking around, I found a lot of these type of entries:304001: 211.100.29.104 ...
I upgraded my PIX from 7.2 to 8.0 and have seen a drastic increase in memory usage. I have 128MB installed. On 7.2 I was seeing less than 50% utilization (51MB), and in 8.0 I am seeing near 90% utilization (114). I do have one IPSec site-to-site tunn...
Dear My network under attack but I have Firwall and IDS but the attack still coming from Announce IP address how I can know his IP address the real one....
hi all, I have Group WEB and MAIL. Every group has two server such as WEB has WEB_1 and WEB_2. Now I has a new server (named WEB_3) and I want CSA MC to manage WEB_3. I do following steps: 1. Download the kit of group WEB to WEB_32. Install CSA at WE...
Hi everybody.Is there any concern by using a IPSec VPN with TCP encapsulation into a network with a great rate of packets discarding due to network congestion? I'm facing an issue where the VPN connection to a VPN3K remains active for few minutes and...
I'm trying to set up an ezvpn server on a 1721 router. I've used SDM to configure the router which has given me the attached running-config.I'm using Cisco VPN client on windows to try and connect with no luck. I've attached a copy of the isakmp debu...
Hi,I have 2 IDS 4235 appliances running 5.0.1 version of ios.Since i have only two default interfaces, i have planned to keep it in promiscous mode itself with gig0/0 as sensor port and gig 0/1 as command and control interface.The sensor interface is...
Hi!I need to set up a redundance solution where one ISP uses PPPoE and one static ip adresses. And over there I though of running to tunnels, where I either load balanced or used failover.But the real problem is that everything needs to go through th...
Hi,I am dealing with SPA-IPSEC-2G 1st time in my life. I have a 6506 switch here with FWSM and SPA-IPSEC-2G modules. The configuration we have has 9 VLANs separated by the FWSM. Vlan 10 is configured as outside interface on FWSM and have public IP as...
have 851 with ez vpn at home (pppoe/dhcp).cisco ip phone keeps unregistering and my guess is that the tunnel is going down as there is not enough data passing.is there any way to deal with this?
My existing Cisco Client VPN users (local auth) have unrestricted access through an 831 router. I need to add a new user w/a tunnel that permits access only to a specific IP and port. Is this possible?My router-to-router tunnel applies an ACL by u...
In the configuracion bellow ASA5510-CSC10-K8CON-SMBS-AS1C10K8ASA-CSC10-PLUSASA-CSC10-USR-100What is the difference between ASA-CSC10-PLUS and ASA-CS10-USR-100Thanks.
Hi all I need to deploy 802.1x with mac-authentication in the network. Network Specificatios: > The network diagram is attached. > The connection between the branches are 10 Gbps and are operating through OSPF routing protocol. > The ACS (4.1)applian...
