old thread, but IDSM-2 is EOL/EOS   http://www.cisco.com/c/en/us/products/collateral/interfaces-modules/services-modules/eol_C51-721550.html ... View more

Both products are pretty strong. But Tipping point have a much more comprehensive, promptly updated, and a well managed signature base. Both products can monitor multiple segements (terminologies are different). A good way to compare is to subsribe to their IPS signature updates and see the difference, I mean both from Cisco and DV labs BR Farrukh ... View more

Hello 1. If configure properly, it will definitely not break any connectivity (its a bump in the wire). Of course if some traffic is denied by any IPS signature itself, that is a different matter. Please see this example for more help: http://www.cisco.com/en/US/products/sw/secursw/ps2113/products_configuration_example09186a0080876d9f.shtml 2. Inline mode is deployed where you want proactive protection and the the IPS box you have has sufficient throughput and other resources that will allow it to monitor that segment of your network (or multiple segments for that matter..) Regards Farrukh ... View more

Hello show tcp brief all (all keyword will also show listeners) show ip sockets  (usually will work on switches only or some routers only) Please also see: http://www.cisco.com/en/US/products/sw/iosswrel/ps1818/products_tech_note09186a008019d97a.shtml Please rate if you find the input helpful! Regards Farrukh ... View more

Hello Please see the following link, it expains the difference between the various feature sets: http://www.cisco.com/web/about/security/intelligence/ios-ref.html#17 Please rate if you find the input helpful! Regards Farrukh ... View more

If you are not using the 64-bit CSM, then you can share the same RME instance (Till LMS 3.2), just have to see the server ip within CSM options: http://www.cisco.com/en/US/docs/security/security_management/cisco_security_manager/security_manager/4.2/deployment/guide/cmsdg42.html#wp47518 Resource Manager Essentials (RME) 4.3 This is the officailly supported version for CSM 4.2 I don' t think the new prime architecture is officially supported (LMS 4.2.x) Regards Farrukh ... View more

Hello I don't think the second NTP server option is available, please check the IDM screen and details on the following link: http://www.cisco.com/en/US/products/hw/vpndevc/ps4077/products_configuration_example09186a0080b03935.shtml Please rate if helpful] Regards Farrukh ... View more

Hello Colin You can download the latest SDM from the following link: http://certs4u.info/ciscoios/Cisco%20SDM/ Please rate if helpful Regards Farrukh Disclaimer: third party website,  I don't own or run that web server ... View more

Hello Please see the following link for a complete example, a much easier approach is to remove the IPSec config and then start the L2TP config, will confuse you less http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a00807213a7.shtml Regards Farrukh ... View more

The Cisco Router client is based on the EZVPN Feature, which is propriertory to Cisco, I doubt it would work with OpenVPN. However (usually) you can setup a PPTP/L2TP VPN to any vendor using a router as a client as that is usaully more standards based. Regards Farrukh ... View more

Hello Thorr You are 100% correct about the SVI  ACL and VACL difference, they also behave differently as VACLs also affect the traffic within the VLAN. However if you see the following section of the link, it shows the SVI ACL as an example, thereby suggesting that it applies to SVI ACLs also: http://www.cisco.com/en/US/products/hw/switches/ps708/products_white_paper09186a00800c9470.shtml#wp42319 Regards Farrukh ... View more

Please see what the start of the document reads: "This document provides information to help you  understand the Access Control List (ACL) merge algorithms and the  hardware resources used in Cisco Catalyst 6500 switches to enforce  security and apply quality of service (QoS) using router ACLs (RACLs), VLAN ACLs (VACLs), and QoS ACLs " So it covers SVIs also i.e. VLAN ACLs. Regards Farrukh ... View more