Network Security

Hello, I'm having an issue allowing legitimate network traffic out. My ASA logs are filling up with: %ASA-4-419002: Duplicate TCP SYN from inside:192.168.1.41/xxxx to outside:172.16.1.215/xxxx with different initial sequence numberThe traffic is know...

Hello,I got following error message when login into IPS over IDM, after error is displayed IDM is closing.errSystemError-ct-sensorApp.463 not responding, please check system processes - The connect to the specified Io::ClientPipe failed.SSH login wor...

I'll have to check into the deetails again but I recall there being a way to change the listening port for SSH.  Not only do you have to configure SSH itself to listen on a new port but I think there was something about making the inbound interface p...

Is it possible to have multiple NAT translation for same IP We have a NAT statement as follows.10.0.0.1 -- > 100.10.10.1010.0.0.0/24 - 10.0.0.0/24 - Identity NAT for the traffic between same ranges. But this is not using when we have the first nat ru...

Hi ..My ASA run OSPF dynamic routing, I want to "clean up" route table by set AD for OSPF by 255. But in route table there is still route for it although it have AD 255.Anyone have try this ?BR

I was configure 3 interface on ASA1st - managemetn (only for management)2nd - gig0/0 is connected to internet with real IP3rd - gig0/1 is connected to local networkI was configure routed NAT to internet.But I have problem with restriction incomming t...

Hi;We have struggled with this for months and no one seems to have a solution.Our CTO has ordered us to block all IPV4 packets from many countries such as China, Iran, Russia, Nigeria, North Korea, etc. Please don't side-track the discussion with rea...

                   I need to upgrade the ASA 5520 from OS 8.2(5)26 to 8.2(5)33.  the ASA only has 64M of flash.  I have a 256M flash card.  What are the steps to upgrade the flash?  I am not sure how  it will boot up because the new flash will be bla...

Goal: Looking to have an ASA5510 with two internet feeds. Moreover, I would like to have my static nat translations continue to work on the backup feed. I have outbound nat working, however I cannot get the inbound nat to work. I had this all figured...

I want to disable the telnet option/feature on ASA 5510 , can anyone please tell me how to do that?i tried no telnet     alone it wont work as i didnt configured any telnet at all.Please Reply.

Hello,I have one question about how to proceed (maybe one example or suggestion), to do authentication this way:Current scenario:ACS v5.x + Active DirectoryASA - SSL VPN (authentication)Future scenario:ACS v5.x + Active Directory and External RADIUS ...

I am currently running a site to site VPN on the ASA5510. It's a small shop and the ASA does most of the job as the switch is a dump switch. I would like to add a WAN link to the ASA and use it as a primary to the other site. The other site might ter...