Network Security

Dear AllWe set up failover ASA. but the tacacs users cannot access failover ASA5555 ? when the user access the ASA, the password do not work. In order to solve the problem, I create new username in the ASA, and then the new user can access the ASA. A...

Hi All, I found the LAN subnet (10.131.1.0/24) can pass the traffic via IPSec tunnel to 10.130.8.0/24. However, The local Inside subnet (10.131.3.0/24) can't pass the traffic through IPSec tunnel. I really don't have any idea on this issue as only th...

Hi All i have two cisco switches 6509 in two module fwsm. i want to configure in two fwsm in active/active mode  so plz help me to configure....

if an ASA config contains the following:!!object network ns1  description name-server-1  host 172.16.5.1object network ns2  description name-server-2  host 172.16.6.1!! Is there a exec show command that will display the object and configured entries?...

Hello everybody,I have an ASA5510 firewall with the following HW configuration:Hardware:   ASA5510, 256 MB RAM, CPU Pentium 4 Celeron 1600 MHzInternal ATA Compact Flash, 256MBBIOS Flash M50FW080 @ 0xffe00000, 1024KBThis platform has a Base license. a...

So did some googlydo and found nothing regarding this question. A vendor recommended using IOS for VPN instead of ASA, as in "best practice". Now considering the vendor also sells the hardware, to me seems like a way to sell more hardware.  So what i...

Hi allI'm trying to understand how Sourcefire/Firepower uses my netflow data. I have a Virtual Defence Center up and running and four ASAs with Firepower services reporting to it. All data flows seems to work and I've even done some IPS tests with pr...

Hello,I just setup a firewall on a series 800 router and shortly after the following message was displayed;Jun 10 00:11:32.814: %FW-4-TCP_OoO_SEG: Dropping TCP Segment: seq:1890440221 1460 bytes is out-of-order; expected seq:1890416081. Reason: TCP r...

Hi guys, I am a bit stucked configuring mail server in DMZ, I can not make it working, seems I have a problem with NAT rules. So, my inside interface is 192.168.1.1 (SecLevel 100)DMZ int 10.1.5.100 (SecLevel 50)outside int xx.xx.xx.xx (SecLevel 0)My ...

We have a PIX 515 with 6.2(2). It's been a long time since rebooting.  Browsing websites with HTTPS from within the network behind the PIX is pretty slow and in some cases graphics display poorly and HTML tables don't paint correctly. That's not the ...

Hi,I would like to limit scanning and syn flooding on ASA. I am thinking I can restrict any outside host to only be able to initiate maximum 500 tcp connections total to inside host at a given time it would help prevent syn flood and port scan attack...

Hi,I have configured threat-detection on ASA and it does not seem to be doing shun to IP addresses that are doing scanning or syn flooding. I have the following config. Any suggestions why this may not be working? I have  excluded my internal public ...