Network Security

Cannot telnet to port 25 to test for SMTP traffic.  Packet trace indicates that the packet is dropped by the implicit rule, but I have tried an access rule specifically for SMTP, and the trace appears to skip the rule and drop the packet when it hits...

I have installed a new ASA5510 with CSC, and everything is working properly except the access to websites using https. All sites/access to them seem to be blocked by the ASA. I have read that this access is by default enabled and I have tried to add ...

What is the correct way to remove an IP address from one of the interfaces bound to a FWSM? I seem to recall reading a warning that executing the no ip address command would remove ALL IP addresses configured on the FWSM, however, I have not been abl...

I'm getting "SYN Timeout " message in my syslog when a user is trying to ssh to a server behind a firewall and getting denied. The hit count for the access-list is increasing every time he tries. The route and the translation are both configured. How...

Hi GuysIs it possible and if so, can you tell me how to log command entered by a user to go to a syslog server. Similarily to the archive command on ISO.Thanks in advanceNoel

My active/standby failed over during a maintenance window last night and when I failed it back to my primary I noticed my standby unit went to a failed status:Other host: Secondary - FailedNamely because Interface dmz (192.168.254.253): Failed (Waiti...

I do have one other question first.  What's the effect of the crypto key zeroize rsa command, and then crypto key generate rsa modulus 1024 while I'm SSH'd to the ASA?  Can I do it?  Or do i need to be consoled in or connected a different way?OK, it'...

Hello,I am trying to find out the best path to upgrade to two ASA 5510 running 9.0 (1).  I know there are changes in the new version.Let me know what information you need and i will post.Thanks,

Hello,I’m working with a network that has been setup with a wireless interface for wifi, an inside interface for a staff lan and of course the outside interface. There is a webserver hosting a website on the inside of the staff network/subnet.For the...