Network Security

    Hi there, We have FWSM modules on Internet Edge 6500s. We have to replace them within a year as FWSM is soon EOL. We want to be able to replace them with ASA module or ASA Firewall. We also would like to have IPS on internet edge. We have an ASA ...

I'm working this in a lab for now, but I am attempting to upgrade from 8.2(5.26) to 8.4(5) on a failover pair of 5510s and have encountered an issue with the zero downtime upgrade process.The whole thing appears to be very simple.  Upload the images ...

Hi,Is there any way I can ping the untrust interface of a Cisco ASA from my trust network? I am trying some options and unable to get this cracking.Is this something that will not work?Regards,Nikhil

Hello All,I have a Cisco ASA 5510 with a strange issue. When I power it ON, the following is the status of the front panel LED:Power is OFFStatus is AmberActive is AmberVPN is GreenFlash is OFFAlso nothing comes up on the console. I suspected a Power...

Hi All, we are having an issue with ASA sip inspection. here is our topology: CUCM-A --> ASA-A -- > ASA-B --> CUCM-B phone from site A calls site B, call is connected and media is being passed. when phone in site A puts the call on hold, the call is ...

Hello all,We've got a proyect that requires a few thin clients to connect to a remote PCoIP server.Looking to the documentation, the only port required to be open through Firewalls is TCP/UDP 4172, however, we've seen (making interface captures) that...

I have an ASA5510 that is connected to outside for WAN, inside for LAN (10.22.254.0/24), and a iSCSI switch plugged into Ethernet 0/3 (10.22.244.0/24). I can ping the Eth0/3 interface (10.22.244.1) but I can't ping across that interface from WAN or L...

I have an ASA 5505 running in a live environementin the past an RDP 3389 port forward was in place to allow external users to access the Terminal ServerWe then experienced a DDOS on RDP and instead of just deactivating the rules, they were removed. N...

All,               I have been seeing a large number of drops because of the DNS Inspect packet being too long. Does anyone have any suggestions? I have tried increasing the maximum message length but that does not seem to have any impact. Thanks!   ...

Hi to everyoneFirst of all my apologies for my poor english, spanish is my first languageI have saw many posts regarding this but after read  most of them none can solve my problemI have the following topology, WCCP is configurated on ASA, inside int...

Hi,We've in our company a Cisco Asa 5510 v8.4(3), Asdm 6.4(7) and a SSM-CSC-10-K9. The firewall is in transparent mode. I get an exchange 2003 SP2 server behind. When users trying to send mailing lists with many recipients (above 300), the Exchange s...