Network Security

Hello I have a question about a strange inconsistent behavior between two ASAs and I'm wondering if someone can point me in the right direction.I have two separate firewalls one at the perimeter and one inside of my network and my nmap scanner is sit...

Hi all, whilst researching the procedure to upgrade the software on an active/standby FWSM pair I read the below extract in the "Catalyst 6500 Series Switch and Cisco 7600 Series Router Firewall Services Module Configuration Guide, 3.2" (http://www.c...

Hi, I am wondering if this is do-able. I have a ASA with 4 interfaces: Internet, DMZ, Guest and Internal with security level increased by 20 for each one. From Internet, our VPN URL(vpn.abc.com) is resolved to be Internet interface address. From Gues...

Hello,I have a firewall ASA 5505 version 9.1(4) and I don't know if I can create an etherchannel with this device. I found this :EtherChannel support8.4(1)You can configure up to 48 802.3ad EtherChannels of eight active interfaces each.We introduced ...

A customer of mine is using ASA CX together with CDA to extract the user-to-IP address mappings. The interaction between CX and CDA is configured and works properly, yet the policies will sometimes not work as intended. We then figured out that CDA w...

Hello, I have a ACS 5.4.0.46-6 running.Now I want to setup a ACS log collector on my ESX 5.5.Since ACS 5.4 is not supported on ESX 5.5 I want to install ACS 5.6. Question :I this setup possible?Can I use the ACS 5.6 as a log-collector for the ACS 5.4...

Hello, I have an issue with enabling the ssh functionality on the outgoing interface called "internet". ciscoasa(config)# ssh 10.1.1.0 255.255.255.0 internetERROR: Unable to configure service on port 22, on interface 'internet'. This port is currentl...

Dear Sirs,Please, help me in solving the following problem. I have 7604 router with FWSM module in module 3.First of all the FWSM CF has been damaged, not physically. I bought the new same compact flash (size, partnumber, etc.). Downloaded the softwa...

Hi... My ASA 5505 at home running 9.2(1) is having some strange issues running OSPFv3. I've configured OSPFv3 and everything is happy happy, but then I reloaded the device for some other reason , and now it keeps crashing on boot up, restarts and the...

I currently have 1 ISP (Verizon) coming in over bonded T1s.  This ISP has NAT pointing to my critical servers that have clients coming in to connect to them via port 8421 and 3024.  We are looking to bring in another ISP.  I know that my 5520 can do ...

I've got an ASA 5525-X with the SourceFire module that will be replacing a 5510. I've got the firewall ACLs from my existing ASA transferred to the new 5525-X and now I'm working on the initial configuration of the Sourcefire module. I've watched a d...

Hi All,I have a customer using an ASA 5550 and recently considering migrating to a FortiGate 620BThe main reason is because it can run as a Firewall, web filtering, anti-spam, anti-virus, IPS and has 20 accelerated ports to avoid any degradation in p...

Hello,           Can any 1 help to me cisco csc-ssm active directory integration with step by step guide. thanks

Hi,I have a new ASA 5515-x.Have a PC connected to the management port. I have network access to it, can tftp up files and ping the firewall.When I try to access it by https://192.168.1.1 or https://192.168.1.1 I get "webpage could not be found".PC co...