Network Security

Hello,I've configured cpu threshold rising snmp trap on Cisco ASA (snmp cpu threshold rising 60% 5) and it works but the 5 minutes configured period of time no. ASA should send cpu threshold rising traps (above 60%) every 5 minutes while actually it ...

Hello, Quick question...On a Cisco ASA (v8.2) how does one show the date of each packet in a packet capture? When performing a packet capture from CLI you can do a "show capture testcapture" command and you can see that the time is at the beginning o...

I have my pair of cisco asa 5515-x's in an active/standby failover mode. My question is, I have both units with IPS software, how are these configured for failover? I can't console into the secondary ASA so I cant run the setup on the secondary IPS u...

I recently discovered that a number of our remote sites could not connect to each other via dmvpn due to various certificate problems.They could all connect to our hubs due to pre shared keys, so the problem was never discovered before a colleague di...

Hi We currently have some ASA5510's running 8.2 and are planning to migrate to ASA5525's running 9.1 but have an issue when trying to upgrade the configuration in that it appears some routes we had are no longer supported so do not come over after th...

Dear all, I’ve configured 2 ASA 5550 active / standby (both with SFP module), they work very well when both of them are connected but as soon as I switch off one of them (to test the failover) then the running one tells me “ can’t find mate “ which i...

We have 2 ASA 5525X V9.1.2 in active/passive failover mode; they are managed via their M0/0 interfaceIs there a way to avoid that primary and secondary ASAs exchange their own IP addresses at time of failover ?the objective is to allow each ASA to be...

Above is the command ip nat pool no  overload prefix 22 Does anyone know what the prefix 22 does and why it is added.  I also and new at learning and currently studying and wanted to know any recommendations for taking the CCNA or CCNP and what onlin...

I have a situation were we require asymmetrical routing. I have turned on TCP-State-Bypass and if I do a show conn I can see the connection with a B flagTCP OUTSIDE 10.10.20.15:1157 INSIDE 192.168.135.15:80, idle 0:00:12, bytes 564, flags UIOBHowever...

HelloI'm trying to implement identity firewall through ldap vpn authenticantion for machine which is not joined to the domain. I found that when I authenticate by vpn there are no logon event on DC (the username\password given at connection was only ...