Network Security

Hi Team, How do we allow the ICMP over IPSEC tunnel, this is required to see all hop info on transit path till destination reachPlease help RegardsSuresh Krishna     

Hi communityOne of our customers is facing a porblem with the default HTTP inspection (page loads slowly). I now tried to exclude this specific range via the MPF of the ASA (IPs are just for example):access-list http-inspection extended deny tcp host...

First i would like to state that I have zero experience with the asa 5505 but I am a fast learner. We recently experienced a power surge that wiped our asa 5505 completely. We have since reloaded the software and created a fresh configuration file us...

This is the syslog error message I get when i am trying to access a corporate server on port 1521 from my host machineSep 26 18:41:26 10.0.5.4 local4:info Sep 26 2014 18:41:25: %ASA-6-106100: access-list inside-access-in denied tcp Inside/10.120.102....

hi, I was wondering if anyone has recommendations on what sigs to enable on the ASA-SSM-10.......I know.... to a certain extent, 'it depends'  on your individual environment.  But I think it must be the case that there are some disabled sigs that are...

Hello GuysI am trying to install AIM-IPS-K9 on my cisco router 1841 . actually I need this only for LAP and practice for the IPS , and I am worry if I will need any License to be able to use the IPS .Thank you very much in advance for your help 

I am trying to use the Tenable Security Center connector to provide vulnerability data to our Defense Center.I am trying to use it on a CentOS 6.5 host. All the requisite perl modules installed are installed.When trying to run the script it gives thi...

Guys I am designing the firewall solution. I have 2 ASA with 2 Switches. Please see the diagram design1 and design2. Let me know your thoughts. Design 1 uses a stacking cable with 2 switches but in a diagram it is represented as one due to lack of di...

if service provider want to build a firewall in internal network like this real inside ----   Access switch ----     outside ASA1 inside  ---      internal network  ---  inside ASA2 outside ----    real outside how to set the NAT for client to use in...

Hello I checked my conn on my ASA , and everyday i found that ip address 111.111.111.111 hits all my internal IPs with TCP traffic . as the below:- TCP outside 111.111.111.111:80 inside 10.0.0.128:59483, idle 0:00:02, bytes 0, flags saATCP outside 11...

This is simply an informative  "blog" to spread help to others of what I found. Anything you do is at your own risk. I have 50+ ASA5505s and wanted to use the newer code. Hardware upgrades are expensive for this older firewall so I researched and arr...

Hi ,I have the following problem when i apply packet tracer command: Result of the command: "packet-tracer input internal tcp 192.168.1.13 25 192.168.3.10 smtp"Phase: 1Type: ROUTE-LOOKUPSubtype: inputResult: ALLOWConfig:Additional Information:in   19...