Network Security

Dear All,we are using the IPS version 6.1(1)E1 (IPS-K9-6.1-1-E1) and the latest version of the signature update is S338.0on Cisco site it looks like for the signature updates S338 is the latest version but when i connect to my device the sensor healt...

Hello,I'm trying to get a NAC Guest server associated with an LDAP Server.I was able to get the NAC Manager working with the same parameters, but the Guest isn't working tough.My question is...where can I find useful logs about LDAP authentication wi...

Ok so for the past few week the 5510 firewall has been slowly leaking memory, about 1mb a day, it is a ticking timebomb! soon there will be no memory left and then theres trouble... There is 256 MB total, with roughly 70 mb free.Cisco Adaptive Securi...

Hi,Need to know the difference between, Source NAT and Destination NAT... My understanding is the Source NAT is No-NAT and destination NAT is the actual NAT.Also, there are two type of natting, one method is to map a group of IP addresses coming on i...

Hi every one,can i reimage my sensor with this image :IPS-4240-K9-sys-1.1-a-7.0-1-E3.imgmy idsm2 is in image 4.1 !!! now i dont want to upgrade it instead i want to completely reimage my sensor using above image.can i do this or i need image file for...

Hi,I have a IPS 4240 with software version 6.2(1)E3 running. Lately I've been having problems with low performance on this equipment due to high cpu utilization going to 100%. I need some troubleshooting tips or commands I can use to determine what i...

I have a security incident were someone is using putty to get around our internet filter.  What they are doing is tunneling through on port 8080 and 443 to an outside server that acts as a proxy.  I can't block port 8080 or 443 for this group of user...

I have gone through all the docs but cannot find any mention on how to set up a "reject" instead of the regular "deny" in an access rule.  I have some legacy Checkpoint Firewalls and want to migrate them over to some of my ASAs.  Some rules ont he Ch...

I just want to start a discussion on how some of us may be controllingweb access.  I have reviewed some of the ASA features such as outbound firewall authentication but it doesnot seem to scale and it does not seem to operate real well with multiple ...

Hi,I am seeing Junk characters as seen when the Bits/sec is set wrongly.I am sure i am using the correct Line speed etc stuff, as the same console cable moved to another ASA works fine.Tried realoading the ASA to see if that helps but no luck.Any ide...

I have a progblem with the policy object data base.  One of the realities of working with object-groups that are shared on multiple firewall and then integrating them into CSM, is that differences may exist within the object-groups of the same name. ...

I support a OBGYN Clinical site. They went with a internet base Phone Provider, Were the Provider installed IP phones that connect to their site thru our existing PIX 506e for dial tone. My question is do I need to Upgrade the PIX 506e, Or Is the PIX...

Hi,I am building a new VPN implementation for a customer using a Cisco ASA 5550 and a NAC 3350 appliance. Due to the availability of switch ports, my customer is inquiring to see if the ASA can be cabled directly to the untrust interface on the CAS. ...

We have an ASA 5540 failover bundle working in Active/Standby mode. On our active asa 5540 when the sh run command is issued it gets stuck and displays the output after more than 15-20 mins.. and it takes another 10-15 mins to get back to the prompt....