Network Security

Hi all,In my firewall ASA 5540,Every day I am getting the syslog message. 4Jul 07 201408:57:39     [ Scanning] drop rate-2 exceeded. Current burst rate is 0 per second, max configured rate is 8; Current average rate is 7 per second, max configured ra...

 asacx-sys-9.3.1.1-112.pkg why required on ASA X series If i upload this file can i get http access on asa cx on over ASA  dont have asacx-sys-9.3.1.1-112.pkg.If i try to upload file to ASA getting insufficient place on flash if i given sh flash it i...

Hello Fellow Mates,One of my client has a fingerprint device configured in his environment. There is the internet router then there is the switch and then some pcs and the device connected. All are accessible through their headoffice as well, but now...

I am configuring an ASA5505. I need to have accesso from outside to inside. Someone can help?. Here's the configuration : Saved:ASA Version 8.2(5)!hostname ciscoasaenable password 8Ry2YjIyt7RRXU24 encryptedpasswd 2KFQnbNIdI.2KYOU encryptednames!inter...

We have configured ASA Active standby failover with ASA5505 . When primary unit power off, secondary unit became active. when primary unit power on, then primary unit is becoming active again. i think for active standby setup there is no preemption. ...

Hi All, From What I have learnt regarding access lists, if there is a global access list, it will be checked after checking the interface access list and the "deny ip any any" will be at the end of global access list instead of at the interface. Ques...

hi, I am migrating from FWSM to ASASM. A question about the ACL migration. On my FWSM, I use the natted IP as destination in ACL. I know we will use the real IP on ASASM. But will the migration step can translate the whole ACL from natting IP to real...

Hello All,Since I was told that U-turn (or hairpin) traffic is allowed by default on a zone based firewall I decided to create a zone-pair like following to stop this from happening in case if somebody decides to hairpin thru my router using it as ju...

I have a number of ASA 5505 boxes which I need to reconfigure to work with a Watchguard XTM 850 over IPsec.  The 5505s were previously configured to connect back to a 5510 Firewall using EasyVPN.  With EasyVPN still enabled, the remote boxes attempt ...

I started working with the ASA 5512-X with CX (Prime Security ver. 9.2.1.3-11) IPS, AVC, and WSE enabled.  Is it possible to send out alerts on detected threats, malware, and other events using e-mail?  Or do I have to do it via the firewall side or ...

Hi all, we have two asa 5510 in Active/Standby fail over mode with AIP-SSM modules. We have urgent requirement to reset AIP-SSM module. Is it possible to do this without triggering fail over on asa. Somewhere its mentioned that its possible by removi...

Hi all,I have ASA 5545x with IPS module and i will be very appreciate if someone help with problem - IPS AutoUpdate trouble. I check all neсessary troubleshooting steps: ·         Signature updates require a valid Cisco Services for IPS subscription ...

I have recently confgured my AIP-SSM-20 module in my firewalls (ASA 5540) which are configured in HA(Active/Standby).This implementation i have done on 13th June. It was working fine.Now, i have observerd that the AIP-SSM-20 module in the primary fir...