Network Security

How do you create a new pcf file we had an old asa ssm - 10 that crashed and replaced it with a 5505 firewall and now all of our existing vpn users cannot connect we would like to know how to create a new PCF file.Thanks,

I am implementing a DNS, a webserver and an email server in a DMZ. I mounted those services on a windows 2008 standard but my NS does not recognize external IP. I assume because i cannot ping form DMZ/inside to outside interface or natted IP. Someone...

Hello Guys, I am working with a small ASA 5505 with 9.0(4) and when trying to execute the following instruction the "Enter the certificate in hexadecimal representation...." appears... xxxx(config)# crypto ca certificate chain SSL-TRUSTPOINTxxxx(conf...

I am trying to configure an ASA 5512 and am encountering a problem on how to set up.  My organisation is assigned a subnet xxx.xxx.32.0/21 by it's parent, with the SDP (service delivery point) being xxx.xxx.xxx.32.1.  I want to place the firewall bef...

Getting the above error continually on the failover standby ASA, looking up this error their is no indication how to fix the problem.reload the standby ASA made no difference as soon is it came back up the messages started again,would going to 8.4.7 ...

   Hi All,  we have a plan to migrate our VPN 3000 to ASA 5545x. I need to know the following points.Is there any tool for converting the config of vpn 3000 to ASA?can i create the config in ASDM demo mode and upload the same config to real ASDM(real...

I'm trying to optimize my nat rules for port forwarding on my ASA 5505 but it's not comming along. I have a server which runs imap and a website - port 25 and 80.I would like to create a service for each port, join them in a service group, and let ou...

Hi,I have auto update enabled in my AIP SSM 10 , at the time of auto updates i have observed the following messages in Console"Broadcast Message from IPSApplying update IPS-sig-S766-req-E4"It remains in this condition and then i have to do a hw-modul...

How do I request a Sub-CA-Certificate for an Ironport WSA ? The GUI only offers the import of the public and private certificates to running the Ironport Proxy Appliance as a subordinate CA. The Root-CA is a Standalone CA from Microsoft.Thanks for yo...

Hi,this is a follow up of https://supportforums.cisco.com/discussion/12251661/asa5505-dual-isp-setup-missing-something-very-simple, which is already marked as solved. The dual ISP setup on my ASA 5505 (SecPlus) is now working, yet there is a problem ...

How to configure syslog on the following IPS module ?I need to send logs from this sensorPlatform: ASA-SSM-10Build Version: 7.0(4)E4Os Version: 2.4.30-IDS-smp-bigphysCan anybody advise me on this.Regards,Rohit

Hi,  During migrations from the old Cisco VPN cliënt to the AnyConnect cliënt, we run sometimes in routing problems. The old VPN-client provided, after connecting a VPN (splitt tunnel configuration) the routes of a higher metric than the metric of th...

Hi team,I have a Cisco ASA5510-AIP10-K9 and I was trying to configure the IPS auto-update via IDM. I have filled the fields with the appropriate data (CCO, password, etc.. ) and the updates won't seem to work. (Yes, the CCO has a contract)I was readi...