Cisco Firewall :: Enabling IPS On 2911 Router?

Sep 20, 2012

I enable the IPS  on the 2911 router .  I am using the Basic IPS signatures that are inbulid on the routers . But sill it showing , that no signature is active .
 
ip ips signature-category
  category all
      retired true 
ip ips signature-category
   category ios_ips basic
      retired false

[code]....

View 1 Replies


ADVERTISEMENT

Cisco Switching/Routing :: Enabling SSL-VPN On 2911

Nov 19, 2012

after installation of demo versions of 2900-SEC-TEMP & 2911-2921-SSLVPN-TEMP & rebooting the 2911 router I do not have access SSL commands.Show license indicates that 2900-SEC-TEMP & 2911-2921-SSL-TEMP licenses are active but NOT IN USE.

View 1 Replies View Related

Cisco Switching/Routing :: Enabling EHWIC Card Into 2911?

Feb 16, 2012

I have installed a EHWIC-4ESG  card into my 2911 router running IOS Ver 15.1(4)M2.  When I do a show diag, I can see the card, but I get the following line "Could not get card instance pa_bay=0 slot=0."  Am I missing a step, do I have change something, is it not compatible (all that I have read, states that is)

View 3 Replies View Related

Cisco Firewall :: 2911 Router Zone Firewall And IP NAT Enable

Mar 20, 2013

I have a simple setup where I have a 2911 router with three interfaces, Inside, Outside and a second "Inside" interface which is labelled as a DMZ. The Zone Firewall applied to the "DMZ" is actually Inside (until I can work through problems). I need to be able to access a device on the DMZ via its external IP so I have designed NAT to use IP Nat Enable commands. This is now working for me fine. However, since utilising IP Nat Enable, my zone firewall now denies return TCP / UDP traffic and consequently I no longer have any internet access. Looking at the syslog messages, the reason for this is that the router is denying these return flows not because they are matching the outside-to-inside policy, but rather they are matching the outside-to-SELF policy. The router seems the detect that the internet traffic is being returned to SELF, when in reality the NAT rule should pick this up and forward it to inside. I can understand why this is happening, because I am NATting all private / inside traffic behind the external IP of the router, which is assigned to the Gi0/0 interface. [code]

View 1 Replies View Related

Cisco Firewall :: ASA 5510 / Enabling Firewall To Send Logging Information?

Jun 22, 2011

I have a ASA 5510 firewall with CSC module and Security Plus license for CSC module.Will you tell me how to configure my firewall to send emails to particular mail ID when someone login into the firewall or any virus attacks from outside.

View 6 Replies View Related

Cisco Firewall :: Block Gtalk On New 2911 Security Enabled Router?

May 8, 2010

I want to block gtalk on my new cisco 2911 security enabled router.

View 3 Replies View Related

Cisco Firewall :: ASA 5510 - Enabling SYS Log ID

May 28, 2013

I'm having a problem with an ASA 5510 and software from Manage Engine (Firewall Analyzer).  They are saying that sys log 113019 is not getting data over to the server where the firewall analyzer is installed.  I'm checking the config and I see it enabled.  Why this particular sys log info isn't making it to the reporting software when other data is.

View 4 Replies View Related

Cisco Firewall :: 5510 Enabling Ping For Dmz

Mar 4, 2011

I currently have an ASA 5510 unit. I have a dmz setup which house some web servers and an inside interface. The web servers contain multiple public ip addresses which I have natted and access is fine.What is the most simple way to enable ping for my dmz from the outside. Meaning if someone outside the network pings one of the servers by its public ip address I would like it to respond to ping.

View 1 Replies View Related

Cisco Firewall :: Pix 535 Enabling RIP On The Firewall

Aug 8, 2012

I am getting this error on my PIX 535 with 8.0.4 code. The error is b Error : OSPF/RIP cannot be enabled on failover interface, I am getting this error while trying to enable RIP on the firewall. The context is single mode and failover is enabled. When I am disabling the failover the Firewall is accepting the RIP configurations.

View 1 Replies View Related

Cisco Firewall :: Telnet Not Work After Enabling AAA On FWSM 3.2

Oct 7, 2011

After enabling AAA FWSM lost opportunity telnet session. FWSM version 3.2(5). In the logs show that resets itself FWSM telnet session.

Conf.,aaa-server TACACS+ (management) host 192.2.151.111
key aaa authentication ssh console TACACS+ LOCAL
aaa authentication enable console TACACS+ LOCAL
aaa authentication telnet console TACACS+ LOCAL
[Code] .....

View 3 Replies View Related

Cisco Firewall :: Enabling Outbound Traffic Through ASA 5520 8.4(4)1

Apr 4, 2013

We've got a proyect that requires a few thin clients to connect to a remote PCoIP server.
 
Looking to the documentation, the only port required to be open through Firewalls is TCP/UDP 4172, however, we've seen (making interface captures) that it somehow also uses ESP (IP protocol 50).
 
We've got a static NAT translation translating those thin clients to a public IP address, we've created ACLs to allow inbound (shouldn't be necessary as our user is connecting to a remote server) and outbound traffic for TCP/UDP 4172 and ESP and I cannot make it work.
 
I've also enabled IPSec pass-through Inspection to no avail.
 
how should we configure our ASA to enable this kind of traffic?

View 4 Replies View Related

Cisco Firewall :: ASDM V6.4 / Enabling History Metrics

Mar 5, 2013

I am currently using ASDM v6.4 and would like to enable the historic metrics feature to view/produce graphs/tables for interface using the Last 5 days, every 2 hours option. how this will impact performance and storage space on the device?

View 1 Replies View Related

Cisco Firewall :: Enabling Microsoft LDAP With ASA 5520

Oct 27, 2012

I am trying to implement Microsoft LDAP server with our ASA 5520. The client is using Cisco VPN client and when I am trying to connect I am receiving the following error message:
 
"Secure VPN connection terminated locally by the client. Reason 413:User authentication failed"
 
I triggered the debug on the ASA 5520 and everything looks fine .The LDAP server is sending the right information without any error message.
  
Googled this error message and I found that I need to enable the simultaneous logins to enable. I enabled it but I got the same error message. This configuration is under remote access vpn>group-policies>General>more options.

View 64 Replies View Related

Cisco Firewall :: Enabling Traffic On E0/2 And E0/3 Ethernet Ports - ASA 5510

Aug 10, 2011

enabling traffic between interfaces on the ASA 5510. Of course I have an outside interface E0/0 and an inside interface (E0/1) for normal operation. The idea was to enable one of the remaining interfaces on the 5510 to attach an internal network resource to for management in case we lost our switch. I am using E0/0 as the outside interface and the inside interface is E0/1. I am wanting to attached a management device on the same inside network IP address range for simplicity. I have E0/2 configured for the same security level (100) as the other inside interface and I also have enabled same-security-traffic permit inter-interface as well but I still cannot access the device on that port. Is there something else I am missing? I guess the best way to explain this is that I want ports E0/2 and E0/3 to act like a "switch" so to say...... The ASA 5505 lets you do this pretty easy but having trouble on the 5510. 

View 4 Replies View Related

Cisco Firewall :: Enabling RIP On PIX 535 / Error / OSPF / RIP Cannot Be Enabled On Failover Interface

Jun 29, 2012

I am getting this error on my PIX 535 with 8.0.4 code. The error is Error : OSPF/RIP cannot be enabled on failover interface, I am getting this error while trying to enable RIP on the firewall. The context is single mode and failover is enabled. When I am disabling the failover the Firewall is accepting the RIP configurations.

View 2 Replies View Related

Cisco Firewall :: 5520 - Enabling And Disabling Graphs In ADSM Dashboard?

Jun 10, 2012

I have just logged into the ASDM for my 5520 and can see under the "Firewall Dashboard" tab that I can enable these graphs/stats, why would they be disabled?  So I was wondering if I enable these and they use alot of memory how can I disable them again?

View 3 Replies View Related

Cisco Firewall :: 5520 Enabling And Disabling Graphs In ADSM Dashboard?

Oct 5, 2011

I have just logged into the ASDM for my 5520 and can see under the "Firewall Dashboard" tab that I can enable these graphs/stats, why would they be disabled?  So I was wondering if I enable these and they use alot of memory how can I disable them again?

View 1 Replies View Related

Cisco Firewall :: 2911 Difference Between The Firewall Areas

Oct 4, 2011

I recently inherited a Cisco 2911, that appears to have had Firewall rules imported into Externally Defined Rules. ACL's are currently allowing/disallowing traffic. However, there are no firewall rules configured. To meet compliance we need to have Packet Lavel Inspection (Firewalled) rules. There are two areas in the router, under ACL area, and under Security. What is the difference between these two Firewall areas?Are both areas providing packet level inspection?Can I build Firewall rules (within the Security area) to replace the ACL's?

View 2 Replies View Related

Cisco :: CISCO Advanced Firewall On 2911 Router Using CCP?

Dec 29, 2012

Guys I am using a cisco 2911 router with three interfaces: Gi0/0 connected through a switch to all my servers and Gi0/2 which will connect to another server, and Gi0/1 is my outside interface connecting through a switch to two ISP's.I have webservers and Terminal servers/File Servers with 10.0.0.0 network address connected throught My Gi0/0 interface.Now I want to implement a Cisco Advanced firewall for security on my router using CCP.I want the firewall to work such that it allows external users to access the servers on Gi0/0 through ports 0,23,25,20,21,53, 110,3389. and to access the SIP server on Gi0/2. My issue is can i just create two DMZ's for both interface Gi0/0 and Gi0/2 without creating an inside zone and Gi0/1 as outside zone as my internal traffic is mostly server based and the users connect remotely through terminal server to access resourcess using RDP, secondly how do I open the relevant ports.I have checked alot and all I have seen is just basic process on using the wizard I have no idea how to go about this issue.

View 19 Replies View Related

Cisco Firewall :: NAT For A Private IP 2911

Dec 20, 2012

We have some Cisco 2911's that we are configuring 2 VPN's ( second is for redundancy) We are pretty confident on the failover VPN setup using SLA monitoring.
 
One thing we are stuck on is the redundant VPN will be setup over a 3G connection provided by verizon. Verizon issues a Private IP ( 192.168.100.X) the far end device terminating the VPN has a public ip of 183.172.22.XX , what kind of NAT translation do I need to make this work ?  Also does Cisco have any good configuration examples for VPN Failover setups for Cisco 2911's?

View 4 Replies View Related

Enabling WEP On DI-524 Router?

Jan 21, 2013

I am setting up the DI-524 router with password protected. I tried to useWEP key is but after restart its going back to WEP disable mode.

View 3 Replies View Related

Cisco Firewall :: EIGRP Metrics On ASA 2911

Aug 4, 2011

I have two 2911 routers running 15.0(1)M4 in a redundant topology connected to an ASA 5520 firewall running 8.4 version. All gears are running EIGRP. In order to distribute the incoming traffic between the two 2911 routers, I am using 'offset-list out' on them, but in the ASA's routing table I see updates from both 2911 with the same metric, i.e. the offset-list is not working. What are the default metric weights on ASA? How can I change them? I couldn't find any known bug.

View 14 Replies View Related

Cisco Switching/Routing :: Enabling Gui On 881 Router?

Oct 25, 2011

I have an 881 router here in house and am attempting to enable the gui interface on the router.
 
I have tried the steps to enable http but have not had any success. Below is the IOS Version and the portion of the show config that reflects the http allow:
 
ROM: System Bootstrap, Version 12.4(15r)XZ2, RELEASE SOFTWARE (fc1)
Cisco 881 (MPC8300) processor (revision 0x100) with 249856K/12288K bytes of memory.
Processor board ID FTX1249Y16Q

[Code].....

View 4 Replies View Related

Cisco Firewall :: 2911 - NAT Any Source Address From Internet

Mar 21, 2011

I'm using a 2911 as our Public Internet Edge Router. I have 2 public sub net blocks from Sprint, we are in the process of migrating. What i need to do is NAT any source address from the Internet from an address on one of our public blocks to the other.
 
Example:
 
Source Address 11.10.10.10 ==> Destination 64.165.123.10 (nat this to 64.165.54.10) inbound.
 
So if from the internet tries to hit 64.165.123.10 we want to nat that to 64.165.54.10 both of which sit on our public space.

View 1 Replies View Related

Cisco Firewall :: ASA 5520 / 2911 - TCP Reset-O Message

Oct 30, 2011

Here's the current scenario:
 
[LAN] <---> ASA 5520 <---> Cisco 2911 <---> [Internet] <---> Server A
                         |
                         |
                     [DMZ]
 
Whenever I access a website running in "server A" (only HTTP traffic) everything works fine. The problem is that when I try to access a different service on the same server but listening on port 2000/tcp I get the TCP Reset-O message on the ASA and the workstation's browser says that "Internet Explorer cannot display the webpage".
 
A weird thing: if I access this service from a machine on the DMZ, it works fine. From the LAN (Inside) it does not work. The main difference is that from the LAN to OUTSIDE the ASA does NAT. From the DMZ to OUTSIDE it's just routed. I did another test from the LAN and the captured traffic is attached. I've been messing around with protocol inspects and firewall + NAT rules on the ASA but no luck at all.

View 5 Replies View Related

Enabling NAT Loopback On HG556a Router?

Jun 16, 2013

This is one of the standard issue vodafone routers. So i set up web-server on my laptop, and it is accessible to the internet now.

However I need to be able to access it from my machine using the public address. But I just cannot find where to enable nat loopback. I looked for options in both regular and advanced user logins (web interfaces). So I suppose the last option is telneting into it, and using commands to do it.. but I don't know how to access it (cant find the credentials). URL

In above link it says that i can find this info in configuration file, but how to access it?

And then what commands should I use to enable the NAT loopback?

View 2 Replies View Related

Cisco :: OID For Enabling And Disabling Port For RV016 Router?

Jul 20, 2011

where I can find the OID for enabling and disabling a port for the RV016 router?  I performed a snmpwalk but I couldn't find it.

View 1 Replies View Related

Cisco Firewall :: 2911 - Immediate Gateway Dropped Ping Traffic

Jun 13, 2011

I have a a firewall policy on a Cisco 2911 - the zone policy from OutZone>InZone basically drops everything apart from inspected traffic on the opposite direction and a few essential traffic generated externally (such as Outlook web access and E-mail exchanging). However, I seem to be getting a lot of firewall drops coming from the immediate gateway of the ADSL WAN address to the internal IP range on port 3. I get about 10 hits every 5 seconds.
 
Policy:

policy-map type inspect FWPol_Out-In
class type inspect CCP_PPTP
  pass
class type inspect FCMAP_In-Email
  pass
class type inspect FCMAP_In-OutlookWebAccess
  inspect(code)

 %FW-6-LOG_SUMMARY: 1 packet were dropped from IMMEDIATE WAN GATEWAY:0 => INTERNAL IP ADDRESS:3 (target:class)-(FWPair_Out-In:class-default), the immediate gateway would ping an internal IP address? Keepalive? Could this be stemming from another problem? The traffic  wasn't generated internally as all InZone>OutZone is inspected.

View 1 Replies View Related

Cisco Firewall :: 2911 - IOS Content Filtering Using Trend Micro

Apr 26, 2012

I have IOS content filtering using the Trend Micro subscription service working on a 2911 running 15.1.(3)T3 with the security license option and a 30 day demo Trend subscription. Once I figured out that the content filtering for Trend appears to be completely broken in 15.2 (even using docs for 15.2) I went back to 15.1 and it works great.
 
Everything seems great so far except I would like to have a more 'fancy' or custom blocked page where a user can have a couple links to either go to the trend micro reporting page [URL] or some other page, and maybe some branding so they know the page is coming from our network and is not some fake security thing or phishing attempt or whatever.
 
I know I can use the 'parameter-map type urlf policy trend ' section to do a tiny bit of customization of the text that appears on the default blocked page display and there is an option for it to go to a simple redirect instead ('block-page redirect -url') but how to do more with either the built in page or the redirect- url to keep the information of what page the user was trying to access and why it was blocked (category etc.) while adding more features.
 
Oh, one last thing, this doesn't support any kind of 'user override' or anything like that does it? So that a network can have a filter applied but an admin could override the filtering to allow temporary access to something?

View 1 Replies View Related

Linksys Wireless Router :: WRT54GS Won't Allow Enabling Encryption

Dec 22, 2011

Factory default settings of my WRT54GS encryption are Disabled. When I try to enable WPA Personal encryption (>Wireless, Wireless Security), it reverts back to Disabled as soon as I make the selection. >Administration, >Wireless, >Encryption Function is Disabled.When I had this router set up at another location with another ISP, this was never an issue. How do I get the encryption function to be enabled?

View 4 Replies View Related

D-Link DIR-655 :: Scheduled Enabling Of Wireless Seems To Reboot Router

Mar 1, 2012

A few weeks ago I noticed that at 9:00am sharp every morning my internet access dropped, and would come back up four minutes later.

The router is connected to a DSL-526B in bridge mode. My first thought was that the modem was playing up, so I factory reset it and reconfigured it.

I checked my ACLS and didn't see any rules that started or ended at 9:00 am so I just lived with it for a week or so until it got so annoying I contacted my ISP to see if they were resetting anything at 9am.

By accident, I saw that my wireless radio was being enabled aat 9:00am, as it had been for the last 2 years, when I first bought the router. But this problem has only started a few weeks ago.

So I changed the wireless schedule to see if that was really the cause for the reset, and sure enough, whatever time I changed the wireless schedule to, the router rebooted at that time.

I've also factory reset the router; twice; the first time I saved/restored my configuration, the second time I recreated all configuration from scratch.

why enabling the wireless radio resets the router, and why disabling it doesn't, and how to correct this behaviour?

View 14 Replies View Related

Enabling Wireless Adapter Knocks Out Edimax 7266 Router?

Nov 25, 2012

I have a new HP lap top which I have connected to the net thro my edimax 7266 routerI also have another lap top and desktop connected via this router. This other lap top I can connect either wired or wireless so the router seems to be working perfectlyThe problem is when I enable the HP laptop wireless adaptor and try to connect to the net . As soon as I do this the orange light on the router goes solid from blinking and I cannot then access the net from any of the computers either wired or wireless. I have to disable the HP wireless adaptor and reboot the router to get a connection on the computers.

View 1 Replies View Related

Linksys Wireless Router :: Wrt54gh Not Enabling Wifi Network?

Aug 6, 2012

My router (WRT54GH) doesnt seem to be enabling the wi-fi network. Non of my devices are able to detect the wireless network.

View 1 Replies View Related







Copyrights 2005-15 www.BigResource.com, All rights reserved