Network Security

Hi Folks, Happy new year!I'm trying to interface my IPS Event with an external log analyzer. This exercise (Log Management) has become vital as my SLA required IPS Event (particularly those with risk rating above 85) be documented and reported <90min...

Dear All,In our AIP-SSM 20  signature 11020/0 1 /2/3 & 4 are configured to be denied. Is there any way we can exclude 01 IP from being denied by this signature?  Any reponse would be appreciated.Thanks

Any word on if or when patch would be available for 6.3.1172 ? My ASA has only 256kb memory, and I believe it would require a memory upgrade for any further software upgrades.

Dear all, to harden secure our PIX does it make sense to deploy a bridged F/W (pfSense, Astaro UTM ...) in front of the outside I/F of our PIX? Thanks in advance for any comment! Greetings, Rainer

If any of you have updated your Java recently, you may have noticed a warning saying that future versions won't support self-signed certificates.  I've updated my Java run-time to version to 1.7.0_51 and suddenly the ASDM stopped working (unable to l...

We are so confused with the settings like per-client-max and conn-max  in ASA. Here's our settings below for all tcp incoming to interface outside. Class-map: TCP_SYN      Set connection policy: conn-max 60000 embryonic-conn-max 200 per-client-max 20...

I'm running into an issue where the IPS is not pingable from the gateway (switch) or internal network, but the IPS is able to ping other networks. For example:I had the ASA configured according to the Cisco recommendation of configuring the managemen...

Hi allWe have a setup where the firewall is the default gateway for all clients, the firewall then routes some traffic to a wan router, the router is on the same lan as the internal interface, so hairpinning effectivelyMy question is, the return traf...

Hello,I'm working on ASA migration from 8.2.5 to 9.1.2. When I try packet trace for static nat testing purpose from ASDM the destination address is not populated by nat ip but the real one. That happen only on a specific interface which is full of na...

We are in process of migrating to different ISP thus we have to change the Public IP Addresses.I have no issue changing inside and outside ip address but the servers in the DMZ are the issue.We want clients access the DMZ servers from new and current...