Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
Hello, I'm working on a IPS design in a fully redundant DC that is almost impossible to force symmetrical flows. My question is when using assymetric mode for TCP reassembly - what exactly is lost? Below is the list I've come up with so far:1. TCP...
Hi, I'm currently working on Tuning a pair of IPS modules in ASA's. We are currently in Promiscous and tuning/filtering to ensure we don't block any valid traffic when making the switch to inline.We are using the new 7.0.1 code and getting the globa...
Hello, I'm working on an ASA that is at 8.0(4)32 and ASDM 6.1(5)57. Below are the logging statements I have in the config:logging enablelogging timestamplogging standbylogging buffer-size 32000logging buffered informationallogging trap debugginglogg...
Hi, I'm trying to determine if you can have a 2-gig Layer-3 Port-channel going thru an IPS 4260 appliance. See attached diagram. Is this possible?The client I'm working with would prefer not to break this Port-channel into equal-cost 1-gig links (I...
Does IPS Manager Express build it's reports from the data on the Sensor's you are managing -- or the data it has downloaded from the sensors over a period of time?I'm trying to figure out if IPS Manager Express keeps data on the box or always just gr...
Hi Fadi, Thanks for the response. In our design, the only time we would really see asymmetric traffic is if one of the 4270's link's went down. If we lose an entire 4270 we are still ok - just an individual link is when we could encounter asymmetri...
I have seen this issue before as well - even with vlan's matching up on both sides of the link. (3750G to Nexus 7k - vPC).Was there ever a resolution or explanation?Brad
Thanks Marcoa - Great Info, Very much appreciated. Cisco should have engineers write the release notes instead of the wonderful folks in marketing.Thanks again,Brad
Hi, I only have the chart for Standard mode - which I cannot find anywhere on Cisco's website - at least the guy presenting at Networkers was kind enough to put it in his prezo. However, in that same prezo he mentions (when there is a negative reput...
Hi, Whomever you purchased the ASA/IPS product from will have your SmartNet information. You will have Contract numbers they can provide you that you will tie to your CCO account. At that point you will get further access on CCO (mainly downloads) ...
