Network Security

I have a customer who needs a 5512-X set up with two ports on the "Outside" interface and act like a switch on the outside.  This is very easy to do with the way the ASA 5505 works just by creating vlans and treating the ports as members of the vlan....

When running WCCP on an ASA with 8.2.5, which does the firewall process first?  WCCP redirects or the ACLs?

Hi All,We have an inline IPS 4260 (version 7.1(7), sig ver 719) that works for a while and suddenly stops passing http traffic through. All other kinds of traffic inlucing https are still passing through as normal. Stop sending traffic to it for awhi...

Hi guysI'm detecting something unusual on my CISCO IPS 4260. This device have 2 CPU's but only in one cpu is showing 99% of use, and the inspection load varies from 40 to 50, and sometimes 80, here's a screenshot of what I'm talking about.Where can I...

Hi,I am about to carry out a migration from ASA 5550 to ASA 5555-X, however I cannot find any detailed document or reliable tool for this migration.Anyone has experience of knowledge about such migration is so welcomed to share his/her views.Thanks.

Hi all,I am trying to establish a site to site VPN with a far side. However, what i would like to do is to NAT the destination address. So let say the destination address is 10.1.2.x/24, I would like to nat it to 192.168.3.x/24. The reason being that...

Hopefully this will be an easy one for the experts. I'm new to ASA and bought a used one from ebay but I cannot connect to the ASDM - I get an error in all the browsers.Cannot communicate securely with peer: no common encryption algorithm(s).(Error c...

Hi everyone,I have ASA 5520.I cannot ping the host(192.168.1.20) which is inside firewall from outside hosts. Help me please.Inside host (192.168.1.20) is translated into (198.24.210.226) using static NAT.From outside host, I used "PING 198.24.210.22...

Hi,I have an ASA-5515X with onboard IPS. Is it possible to purchase a CSM module for Antivirus protection and have it running at the same time as the IPS?If so should I be concerned about too much traffic interrogation causing potential latency?Thank...