Network Security

I'm not sure if this is expected behavior or not.  I want to make sure I didn't configure something wrong.We're running two ASA Service Modules in Active/Active.  Here's the setupASA1 - Primary ActiveASA2 - Secondary StandbyASA1 - Context X Primary A...

We have a ASA 5520 running ASA version 8.2(2)16 with 2GB of RAM.  Several weeks ago we encountered a problem when scans of one of the DMZ's from our threat appliance caused the firewall to open tens thousands of connections ultimately exceeding excee...

I am trying to configure port forwarding from outside public ip address 50.xxx.206.91 to inside host 192.168.1.40. Port range tcp/udp 30000-30060.Outside ip address of the firewall is .90I can also use ip address of the outside interface if that is e...

Dear Experts,We currently have a Cisco 2911/K9 router and I feel there's a chunk of people who are eating up our bandwidth.I am no expert in this area, but I have searched endlessly and haven't been able to find much information on how to resolve thi...

After reading some info on Julio's website, I have come to think my VPN configs are a bit too fat and not very streamline. My configs are starting to hammer CPU on the routers now, especially as the remote offices are now starting to use VDSL speeds....

Hi All,we have cisco asa 8.2(5), observed that snmp server is not getting the reply from the standby firewall sometimes for a fraction of seconds and some times it lasts for 5-6 mins, and automatically it comes up. Snmp server is getting connected to...

Q. How many virtual contexts and VLAN’s are supported on the Cisco ASA 5585-X ?Q. How many subnets can one security context support in Cisco ASA 5585-X ?  Thanks & Regards Salman Ahmed KhanSr. Network EngineerARWEN TECH (PVT) LTD     GSM:  +92 321-28...

We have a ASA 5505 that is being hammered on port 3389... Currently the port is set to allow connections from any which needs to stay the same, currently the port is being smashed by a bot that is trying to guess username/password.Currently we have b...

I was looking for solution for below problem:We have HeadOffice and 2 Branches. 2 branches are connected to Head office with IPSec Site-To-Site VPN.In that we have Branch 1 as a Windows AZure Site-To-Site VPN whereas Branch 2 is connected with Cisco ...

Hi, Being a call center we use softphones to make calls running on SIP.Though the ACLs are in place, keeping the outside interface to security level '0' seems to be hindering softphone application. The softphone does not load properly.I cant figure o...

Hello-I've created a policy map to allow TCP probe options 76 - 78 on the ASA Firewall for our Riverbed appliance. Here is the setup:access-list tcp-traffic line 1 extended permit tcp any any class-map tcp-traffic match access-list tcp-traffictcp-map...

I have an ASA5512-K9 covered with SNT currently. I purchased a spare L-ASA5512-IPS-SSP= license to enable the IPS; the spare license is not coverable with Smartnet. How do I get Smartnet with Signature Updates for the IPS if the chassis isn't eligibl...