NTP Windows Server and AIP - SSM

We use a server based on Windows as the NTP server. But I need the NTP key to configure NTP on the AIP - SSM, key to the ID value and the NTP. How do you find this information or bypass? Or is it possible to set the clock without using an NTP server. I disabled the NTP service, hoping that it will use the firewall clock, but it didn't.

Kind regards

Your offset must be-360.

The offset is in minutes rather than hours. Now, you say that the CDT is only 6 MINUTES from GMT when what you want-6 HOURS-360 minutes.

offset - 360

Tags: Cisco Security

Similar Questions

  • Question on the CSC - ssm modules and aip - ssm in the ASA5500

    Is it true that the CSC - ssm and aip - ssm modules cannot coexist in the device of ASA5500 at the same time?

    Another issue is the site of cisco using the command keyword intra-interface involving NO IPSEC TRAFFIC, there are example of config/example

    It is true that the CSC - ssm and aip - ssm modules cannot coexist in the device of ASA5500 at the same time.

    It is not a sample configuration partitions on the spot yet. However, outside the control of the same security, you must the ordinary rule of translation to pass traffic. Also, because of the dynamic nature, it allows only one-way traffic. For example:

    NAT (inside) 10 192.168.1.0 255.255.255.0

    Global interface (10 Interior)

    Global (ouotside) 10 interface (is not required however)

    Sincerely,

    ~ AJ

  • What are different between the IPS and AIP - SSC and AIP - SSM?

    Dear all,

    I'm not clear about the IPS, AIP - SSC and AIP - SSM module which are different?

    Then, when we can use IP addresses?

    When we use the AIP - SSC?

    When we can use AIP - SSM?

    Thus, a different IPS and AIP - SSC and AIP - SSM material or the same material?

    Best regards

    Rechard

    AIP - SSM is an IPS Firewall ASA module.

    IPS is available in different flavors:

    -Device of the IPS 4200 series

    AIP - SSM - module IPS Firewall ASA

    -IDSM2 - IPS module on 6500 series switch

    AIM - IPS - map IPS on router IOS

    Please rate and mark post useful.

  • New deployment with the ASA and AIP - SSM module

    Hi guys and girls,

    I think to deploy an ASA with IPS module AIP - SSM to my perimeter. I'm going to use / * Style Definitions * / table. MsoNormalTable {mso-style-name : « Table Normal » ; mso-tstyle-rowband-taille : 0 ; mso-tstyle-colband-taille : 0 ; mso-style-noshow:yes ; mso-style-priorité : 99 ; mso-style-qformat:yes ; mso-style-parent : » « ;" mso-rembourrage-alt : 0 à 5.4pt 0 à 5.4pt ; mso-para-margin : 0 ; mso-para-marge-bottom : .0001pt ; mso-pagination : widow-orphelin ; police-taille : 11.0pt ; famille de police : « Calibri », « sans-serif » ; mso-ascii-font-family : Calibri ; mso-ascii-theme-font : minor-latin ; mso-fareast-font-family : « Times New Roman » ; mso-fareast-theme-font : minor-fareast ; mso-hansi-font-family : Calibri ; mso-hansi-theme-font : minor-latin ; mso-bidi-font-family : « Times New Roman » ; mso-bidi-theme-font : minor-bidi ;} Cisco IPS Manager Express (IME) to monitor the IP addresses to monitor the ASA. I have no plans on deploying a device IDS.

    Question: The IME is designed to send notices to the subject of threats? What are some of the configurations in your network? (Just prick with the last question.)

    THX...

    IME is designed only for IPS monitor (whether it be IPS appliance, module AIP - SSM on ASA or other module IPS). IME is not able on the control of ASA.

    EMI can provide advice by email about events which are fires on the IPS, while the IPS itself cannot. EMI may also keep all the events triggered by the IPS, while SPI buffer is small enough, that so if you have huge demonstrations, the buffer gets replaced pretty quickly.

    Here is more information about IME, if you are interested:

    http://www.Cisco.com/en/us/products/ps9610/index.html

  • ASA5510 and AIP-SSM-10 module in promiscuous mode

    Hello

    I have a 5510 ASA with the AIP-SSM-10 and want to use just like an ID in promicuous mode.

    ASA 5510: ASA version 7.0 (8)

    AIP-SSM-10: IPS version 5,0000 E2

    At this point, we would like to configure a single interface of ASA to send traffic to the agreement in principle for the inspection of IDS (and continue to use our firewalls third existing). Is this possible?

    The following discussion gives to think this isn't:

    https://supportforums.Cisco.com/message/957351

    22.1.100.2/28 I have it configured on the interface Eth0/0 (outside) and 10.5.100.3/24 on the AIP - SSM management interface and switchports (Cisco 6509) have been configured by SPAN.

    Thanks for your advice in advance.

    Kind regards

    Lay

    You are right. Unfortunately, module AIP on ASA firewall does not listen on traffic SPAN. If you want that SPAN ports, then you can use the IPS (IPS 4200 series appliance) appliance that supports the SPAN traffic to inspect.

    PIX is also a firewall, not a feature of IPS, which cannot be used as an IPS device.

  • How to install Windows 7 on dvd with windows server and win 7

    I have a DVD from Microsoft which has install for windows, windows 7 and sql server on it. When I boot from the DVD to install win7, windows server Setup starts automatically.  There is no prompt asking you what OS do I want to install from the DVD.

    How to install windows 7 from such a DVD?

    (the DVD was contained in the package Visual Studio 2010 with MSDN subscription.  The DVD is labeled "msdn subscriptions".  The product on the DVD code is X 16-57657-01)

    Thank you

    Try to post your question to the MSDN Subscription Feedback forum:

    MSDN - Microsoft subscriptions Feedback Forum

    I hope a moderator can help you because this problem is more than the operating system media.

  • How to add an additional query field to the opening screen of windows (server and Desktop) session

    Hello

    Is it possible that I can add another question in the Windows log on screen?

    Currently, there are user name and password.

    Can I add a field more where can I ask one other piece of information? Something like a group security code or another type of challenge?

    Thank you

    Sorry, you can not. The logon process is deliberately fixed in order to make life more difficult for would-be hackers.

  • KMS for Windows Server and Office Licened Volume 2013 questions?

    I want to install the KMS server for all of my Office 2013 volume license copies.  It says I can't because my PC is not a VL installs.  Is there a way to bypass this limitation because I bought 50 copies for my group.  If VL rep would have told me this, that I have not shot this way.

    This issue is beyond the scope of this site and must be placed on Technet or MSDN

    http://social.msdn.Microsoft.com/forums/en-us/home

  • Automatic update AIP-SSM-10 and ASA 5510 (Beginner)

    I see that it is possible to automate the updates of the ASA 5510 and AIP SSM via FTP on my own server. Is it possible to automate the download directly from Cisco.com?

    Thank you!

    Jeremy

    Jeremy, the answer to your question is correct, as far as the Cisco products are concerned. So I wrote a PERL app that does exactly that, and I published an article about it in the June 2007 issue of Sys Admin magazine. Here's the article online: http://www.samag.com/documents/s=10128/sam0706a/0706a.htm

    And it is also on my site, with a tar of scripts to:

    http://www.LHB-consulting.com/pages/apps/index.html

    Good luck.

    -Lisa

  • transparent mode with AIP-SSM-20

    I currently have an ASA5510 routed with AIP-SSM-20 mode.

    It is necessary to use a connection in optical fiber between the ASA and ASA on the campus, so the AIP - SSM will need to be removed and replaced by the SSM - 4GE.  This section should present no problems.

    However, this will remove the IPS device, and I always want to use IPS.

    So what I think is to get another ASA5510, install the AIP - SSM, configure ASA for transparent and put it between the inside of the ASA routed and my local network.  The ASA transparent would be strictly works in the form of an IPS appliance.

    The installation program should look like this:

    Internal LAN <> ASA transparent with IPS <> routed ASA <> WAN

    The AIP - SSM can always perform with the ASA in transparent mode IPS?

    Is it possible to configure the ASA and AIP - SSM such as traffic to and from a particular server completely ignores the AIP - SSM?

    I have a couple of file servers which generate heavy traffic and can overload the AIP - SSM.

    Kind regards.

    AFAIR, it is no installation AIP in a transparent firewall problem.

    "The SAA in transparent mode can execute an agreement in principle.  In the event that the AIP fails,

    the IPS will fail-open and the ASA will continue to pass traffic.
    However, if an interface or cable fails, then traffic will stop.  You
    would need a failover pair to account for this failure event, which
    means another ASA and matching AIP."

    And no there is no problem to exclude certain hosts/ports/subnets inspection by IPS via MPF.

    http://www.Cisco.com/en/us/docs/security/ASA/asa82/configuration/guide/IPS.html#wp1050744

    What I consider however is however if the ASA 5510 as second level firewall for 5520 s will be enough.

    http://www.Cisco.com/en/us/products/ps6120/prod_models_comparison.html

    HTH,

    Marcin

  • Thing to deal with when migrating site of linux to windows server?

    I need to migrate my customer site because they asked me to host windows Server. But I am new to windows server platform. I'm only familiar with linux server. If you make a mistake then client will sue me.

    Customer site is careerarm , because I copied all the files in the Microsoft windows server and made all the necessary changes to the config file... Y at - it all other things to look at before changing DNS

    Hello

    Post your question in the TechNet Server Forums, as your question kindly is beyond the scope of these Forums.

    http://social.technet.Microsoft.com/forums/WindowsServer/en-us/home?category=WindowsServer

    See you soon.

  • Windows server 2003 users automatically gets an email when I set up in Active Directory?

    Original title: Windows Server 2003

    It comes to the associated user account.  I need to add users that I know how to do, but they will automatically get an email when I set up in Active Directory? The e-mail server has been implemented.

    I suggest you post your question on the TechNet Forums, where we are the support technicians who are well equipped with knowledge about Windows Server and Active Directory. I've added the link below on the home on TechNet forums.

    http://social.technet.Microsoft.com/forums/en-us/home

    See you soon!

  • W32tm Windows Server time is off by 3 minutes. Perhaps.

    I have my Windows servers get their time to our primary domain controller, which is configured for synchronization with 0.north - america.pool.org.

    If I make one
    w32tm /stripchart /computer:0.north-america.pool.org
    Time that all the computers are on.  Same for time.nist.gov
    However, if I go to http://tycho.usno.navy.mil/cgi-bin/timer.pl , I get a time which is 3 minutes earlier.
    My w32tm Setup seems to work very well, but there seems to be some differences on what the exact time is according to what time server ask.
    Any ideas?

    Hello Midas,

    The question you have posted is related to Windows Server and would be better suited to the TechNet support. I suggest post you the question in TechNet support for more information.

    http://social.technet.Microsoft.com/forums/en-us/newThread?category=WindowsServer&Forum

  • How to install a hard drive more on a Windows Server machine?

    Disable windows server and install the new hard drive

    I installed windows on a hard drive server but now I want to turn off and install on a new larger hard drive. How can I go about it?

    Hello

     
    There are a few options that you can try:
     
     
    1. format the hard drive.
     
    2. replace a new operating system. When media starts, you are presented with the option to format the drive before installation.
     
    3. If it is a separate partition, and you're dual-boot, you may need to set your boot options after formatting your partition WS2008. Demarrer start on your older operating system drive, and then select the boot option fix for your existing partition from the operating system.
     
    Note: If both the HARD drive is connected to the same machine, start from the media format of the previous installation on the old HDD and install the operating system on the new HARD drive.

     
     
     
    See also:
     
     
  • Folder not visible on Windows Server 2008

    shared new folder on the file server is not visible until I have update and also not disappear after deleting until I update

    I use Server2008re Windows server and Windows XP as a client Machine.
    Pls help

    Hello

    Your question of Windows is more complex than what is generally answered in the Microsoft Answers forums. It is better suited for the public on the TechNet site. Please post your question in the below link:

    http://social.technet.Microsoft.com/forums/en-us/category/WindowsServer

Maybe you are looking for