I just purchased a SA 520 and I am trying out the IPS feature before I buy. During my tests I get around 85 Mbps off a 100 Mbps connection (which is relatively normal), however as soon as I enable IPS with very few options (Trojan/virus, HTTP, etc), it drops down to 18 or so. Anyway to improve this?
View 14 RepliesI am doing a security assessment of an organization that uses 871/881 routers with the firewall features enabled. I see the following commands defining packet inspection done by the firewall software.
-ip inspect name inet-users tcp
-ip inspect name inet-users udp
-ip inspect name inet-users icmp
What I am trying to define is the inspect name "inet-users". It is obviously a constant defined by IOS as it is not defined anywhere in the configuration file like any other "variable" and does not generate an error.What does "inet-users" define? I'm assuming it is all users using the interface(s) where the inspect commands are used, but is that correct? The Cisco IOS manuals do not contain a reference to "inet-users" hence why I'm here asking.
After configuring the router and enabling a load of functions to secure our LAN, the download speed halved! Even disabling AcitveX "eats" 10Mbs! I understand that enabling IPsec will drag the speed down to 25Mbps, but I have disabled this.
Even setting the QoS to speeds equal or higher then the ISP's promissises drags the speed down!
The products from SRP 540 series line (541w etc) will ever support IPv6 features or remote VPN (eg SSL VPN or Cisco QuickVPN)? If yes, is there a time horizon?
View 6 Replies View RelatedI have a cisco 1841 router and want to run BFD i think it needs IOS 12.4T..It has currently 12.4 but no T does the "T" IOS have mroe features?
View 1 Replies View RelatedNCM is going away. It is recommend to move to LMS. We already have a LMS deployment. Currently just used for Monitoring/Performance.Trying to figure out how to get the Configuration change piece that we used NCM for into LMS. Not really having any luck.What I am really wanting to do is configuration archive, device config change notices (when a device config changes I can run report to see who and what was changed), and configuration comparisions (between old and new configs)
View 5 Replies View RelatedNeed to understand some features of Cisco Small Business 300 Series Managed Switches. one of this is "Static routing/Layer 3 IP routing between V LAN's allows for communicating across V LAN's without degrading application performance" what is this means can i create V LAN or just V LAN can pass through this kind of switch? how about this features from Cisco Catalyst 2960 Series Switches " The ability to set up virtual LAN's so employees are connected by organizational functions, project teams, or applications rather than on a physical or geographical basis" what is the difference of this features of this different model of switches?
View 3 Replies View RelatedI wish to use a 1921/k9 as a router on a stick. Inside interface interconnects up to 9 VLAN, and performs the routing. Does the 1921/k9 supports trunking and VLANs (I think it should support 16 VLAN, but I am not shure) or I should choose 1921-SEC-k9? Routing performance is the same both on 1921/k9 and 1921-SEC-k9? (I think I'll use static routes or RIP, it is not a large network)
View 1 Replies View RelatedI'm trying to secure my dir-615 and I can get in to the web site but the connection wizard is greyed out and the manual set-up is alos greyed out even though I can select manual set up?
View 2 Replies View RelatedWe just replaced a floor swithc, and ended up going with an IOS-XE software, LMS does not seem to like this software, the device is not available in my Identity dashboard, it's abviously running dot1x.
LMS shows it as software version 03.02.01.SG, same as you get when you do a show version, license level is enterprise services.
Actual Image name: cat4500e-universalk9.SPA.03.02.01.SG.150-2.SG1.bin
Also, the IOS upgrade option does not work for this device, it give an error saying to perform an inventory collection, which I have manually performed, the device is reachable and manageable by LMS, and it does not show up in any of the IOS version reports.
My current network setup has pix 525 firewall and for IDS i have 4215 box.As the utilization is high i am buying new ASA5520 firewall.
My query is
1 My IDS is end of support should i buy an IPS moudle with the asa 5520.is it recommended?
2 Other than firewalling what are the default features supported in asa 5520 like vpn,content filtering etc.
I can not connect to the web features when plugged in the router but works fine when plugged in the modem directly.
View 1 Replies View RelatedI am trying to stack the following -
3750G 12S - 12.2.53(SE2 IP Services) Running EIGRP & OSPF
with
3x 3750X 48P-S - 12.2.53(SE2 IP Base License)
Doing some research, the IP Base does EIGRP on the 3750X, does it do OSPF?
If not I will have to get licence for the 3750X?
I am planning to get the following Hardware;AIR-CT5508-50-K9 5508 Series Controller for up to 50 APs AIR-LAP1262N-E-K9 802.11a/g/n Ctrlr-based AP; Ext Ant; E Reg Domain..During my design, i am considering to get the following security features.I don't have WCS and Mobility Services Engine (MSE). Managing Access Points at remote/WAN office.wIPS configuration (without WCS and MSE)How Rouge APs will be detected and Prevented. Can Automated prevention be implemented.Is wIPS (with WLC 5508) support to detect and prevent Rouge AP.Is Proxy Redirection supported on WLC so that the traffic from Wireless clients will automatically be redirected to Proxy (without adding the proxy in explorers of Wireless Clients).
View 7 Replies View Relatedis there a way to verify how much licensed features are used?If the usage is far or near to the limit?
View 4 Replies View RelatedDevice: Cisco ISR 1811
IOS: 15.1(4)M5 Advanced IP Services
I seem to be unable to access any IKEv2 features. The command crypto ikev2 is not available. Everything I've read suggests IKEv2 is available in this IOS version.Is there something I'm missing?
Will ACE 4710 support for IPS features?
View 1 Replies View RelatedI would like to configure the policy base routing (PBR) on router (3900) base on the "specific tcp port" (TCP port 16255) to re-direct the traffic to another FE port.
From cisco web portal, CAT 4500 should support PBR as below:"Policies can be based on IP address, port numbers, or protocols. For a simple policy, use any one of these descriptors; for a complicated policy, use all of them." url...
Does 3900 router has the same features on the PBR? if yes, can it support "source tcp port" and/or "destination TCP port"?
We just purchased a bunch of 3750s, and we need to do EIGRP stub routing and VRF routing
For the newer IOS versions (15+), will I need activation keys?
using the 55xx as a L3 Distribution switch or even as a Core. By enabling the L3 features does it allow you enabled L3 SVI's for VLAN interfaces or are there interfaces on the daughter card that are used for routing instead?
View 5 Replies View Relatedgive me the run down on the features removed from the 4400 series in the 2500 series? Obviously 4400 is now EOL, and so i cannot purchase new. Therefore I was looking at the 2500 for my implementation to save costs also.I would like to have two SSID's, running seperate VLAN's, one voice, one guest, trunk the link to the AP's, which will be 1131AG or newer, N possibly. Voice needs to be encrypted with WPA or WPA2, guest needs to be open using the guest access feature. Here's a sample but with EAP:
[URL]
Is this supported to have WPA on one SSID and Guest access on the other? i did spot a paragraph in the 4400 manual stating that certain restrictions apply regarding one SSID having encryption and the other being guest mode?I notice also in the WCS documentation, it doesn't explicitly state it supports the 2500 series under the managed devices section?
Any chance the filtering features on the 5508 controller code will make it into WCS at some poiint? Being able to sort these lists would be invaluable.
View 5 Replies View RelatedI have a 2921 router and want to use mpls feature. Right Now we are using c2900-universalk9-mz.SPA.151-4.M1 image but mpls static cross connect” is not working with this image. And will this image(c2900-universalk9-mz.SSA) be worked?
View 2 Replies View RelatedWhat features are supported in the image ipservces cisco 3750X-24T-S? Need NAT
View 1 Replies View Relatedsome of the features of 6500 are enabled by default and woudn't appear in the "Show run". See the command below and how do I make sure whether these featues are enabled by default or not. Would it appear in the config if enabled?
ip verify unicast source reachable-via rx
ip verify unicast source reachable-via any
storm-control broadcast level 70
what are the difference between the commands below and can they be enabled together.
spanning-tree guard root
vs
spanning-tree loopguard default
vs
spanning-tree guard loop
I am wondering if IOS bundled by default with CISCO3945E-SEC/K9 and CISCO2911-SEC/K9 contains adv. ip services features (like Eigrp, OSPF etc.).
View 1 Replies View Relatedurl...For the New Firewalls i.e. 5512X , 5515X etc there seems to be integrated IPS and we don't need to order any extra license or part number to get the IPS features .
But for the 5585X It says 2Gbps for SSP10 engine but I have seen in the Dynamic Configuration Tool that SSP10 and IPS-SSP10 are different things . Which means that I will have to order 2 service engines SSP10 and IPS SSP10 to get the IPS features and if I only order SSP10 with that Chasis I will only get firewalling ?
Do any of Linksys routers have the recently popular guest network access feature where you can create a password protected or no password secondary network that provides internet-only access to guests and prevents them from accessing your main network (computers, printers, HDDs etc?). Does Linksys's highest end WRT610N have a similar feature that works slightly differently but does the same thing?
View 9 Replies View RelatedI just picked up an e3000 last night. Set up was performed manually. Flashed to 1.0.04. No issues and I was up in under 10 min.Although I read the user guide, prior to purchase, I admit I did not expect that I would not be able to configure ALL of the router's features and functions from the web based configuration, without using the CISCO Connect CD.Parental Controls and GUEST Access cannot be configured unless you load the Cisco Connect software.While this is not a huge deal, this implementation is clumsy and cumbersome for advanced users. Honestly, I had no disire to install the Cisco Connect software. I was further disappointed to see that it stores the router's password.
My feeling here, let's not ruin a great thing. There are two types of users. One's who need a configuration wizard, and other's who don't. I guess some inroads are being made in the right direction as some GUEST access functions can be made in the web gui on the e4200. I hope this can be further expanded to all "e" series routers in the future. Overall, it works as advertised. Streaming 720p HD video over wireless 2.4Ghz band G only is flawless. This is no different than my wrt54g2, but I'm upgrading to a 1080p player and have read that N on the 5Ghz band is the way to go.
I think choose this SWITCH 4506-E and I need running only features L2 Metro, but Idont known what IOS for this!
View 1 Replies View RelatedWe are experiencing output drops on our 3750G-12S (IOS 12.2.55).
I have monitored throughput with MRTG, but it doesn't seem that high compared to that the 3750G is supposed to handle 17.8 Mpps.
The 3750G's are stacked, running ospf, qos, multicast (IPTV) and etherchannel.Is the maximum throughput reduced by stacking or any of the other features?
I don't know if one can estimate what the maximum throughput is per ASIC or per port, but on one of the ASICs that is having drops the peak unicast load is 1.3 Mpps and multicast Mpps is 0.9 Mpps. Total ~2.2 Mpps.
This doesn't seem high at all and I don't understand why the drops are appearing. What I can do to find out the reason for these drops?
my office is looking in ordering a HWIC-1FE to supply our cisco 1841 router with a second ISP connection. i wanted to find out if this card support load balancing and fail over? not sure if fail over is the right terminology so ill explain, i need it so that if one ISP connection goes down (as it does often) it fails over to the second ISP.
View 3 Replies View RelatedI have the Linksys/Cisco router E4200. My question is setting up parental control features as specified in [URL] - specifically the blocking of sites based on certain keywords and/or blocking sites based on age groups (child/teen). I do not see this capability in my Cisco Connect software. Is this feature available for E4200 v1? If so, how can I obtain the software?
View 2 Replies View Related