Network Security

hi, I am migrating from FWSM to ASASM. A question about the ACL migration. On my FWSM, I use the natted IP as destination in ACL. I know we will use the real IP on ASASM. But will the migration step can translate the whole ACL from natting IP to real...

Hello All,Since I was told that U-turn (or hairpin) traffic is allowed by default on a zone based firewall I decided to create a zone-pair like following to stop this from happening in case if somebody decides to hairpin thru my router using it as ju...

I have a number of ASA 5505 boxes which I need to reconfigure to work with a Watchguard XTM 850 over IPsec.  The 5505s were previously configured to connect back to a 5510 Firewall using EasyVPN.  With EasyVPN still enabled, the remote boxes attempt ...

I started working with the ASA 5512-X with CX (Prime Security ver. 9.2.1.3-11) IPS, AVC, and WSE enabled.  Is it possible to send out alerts on detected threats, malware, and other events using e-mail?  Or do I have to do it via the firewall side or ...

Hi all, we have two asa 5510 in Active/Standby fail over mode with AIP-SSM modules. We have urgent requirement to reset AIP-SSM module. Is it possible to do this without triggering fail over on asa. Somewhere its mentioned that its possible by removi...

Hi all,I have ASA 5545x with IPS module and i will be very appreciate if someone help with problem - IPS AutoUpdate trouble. I check all neсessary troubleshooting steps: ·         Signature updates require a valid Cisco Services for IPS subscription ...

I have recently confgured my AIP-SSM-20 module in my firewalls (ASA 5540) which are configured in HA(Active/Standby).This implementation i have done on 13th June. It was working fine.Now, i have observerd that the AIP-SSM-20 module in the primary fir...

Hi, I have a Asa 5510 basic with two ISP, one DMZ and LANMy default GW is ISP1 and it have a the lowest weight. the other ISP2 have the route 0.0.0.0 with a more weight.My network is :We need that SRV2 go to internet using a IP for ISP2, but when i c...

So, as some background, we have been happily running ASA 8.4(3) for some time.  But we actually first experienced this problem a while ago when trying to upgrade ASA software version but downgraded back to 8.4(3) again, the problem went away, and it ...

Hi Guys, We have two Cisco 5525X ASA firewalls and they are in a Active/Standby failover cluster. At the moment each ASA is using Gig 0/3 plugged into a 6509 switch as part of the failover link. Each ASA are at different data centres. I need to add a...

Hello friends,I am currently running Cisco Security Manager versión 4.4, managing50 firewall devices (routers, ASA, etc). One of them has gotten RMA, so I wanted to ask what is it gonna happen? Do I have to delete the current device from Cisco Securi...