Hi Guys,I am facing high CPU util on my pix 515 E which is in failover mode.During peak hours the util is see rising to 60% where as in off peak hours it is normally12%.During normal operation the average utilisation was observed to be 30% b...
Hello,I've configured ipsec vpn, and it's working fine,I've done split tunneling, so the users would be also able to connect to the Internet as wellThe complication is this,I have an outside server, of another company that the VPN users need to conne...
Hi allDo anyone of you know of a tool that can accept a list of ip-addresses and spit out their origin.BackgroundI have a list of addresses that have scanned and attacked a target over night.I wish to show what good use we have of our firewalls and w...
Hey there!I have a working environment but wondering if there is just a better way to accomplish what I am trying to do (without a layer 3 or 4 switch). Basically I have a few sub interfaces on my Cisco ASA5510.Now what I do need is some of the VLANs...
We have several user subnets that we want to start securing but no one knows all the ports and such that are currently in use. We dont have the time to open everthing up one by one over the next month or so. We have put a permit any any log and have ...
Hello,How to secure vlans on Catalyst 6500 by using Cisco ASA Firewalls?There are no free modules on Catalyst 6500 to install a FWSM module.What is the best configuration to secure vlans (~80 vlans) by using cisco ASA firewalls (context, hairpining.....
Hi Folks, We have a secondary FWSM which has 50 Contexts, while the primary one has 100 Context. so the failover is not working. Is there away to downgrade the first one to 50 Context without paying extra cost. I mean I want to do the reverese thing ...
I have an ASA-5520 with a IPS-SSM-40. I configured the IPS control port to an ip address on the ASA's inside network subnet and connected it to the same switch as the ASA's inside port is connected to. I am using a single context. ...
Hi,I'm setting up a new IPS sensor on an ASA 5500.I've heard a recommendation that for a new sensor implementation at a given site, it is better to allow the sensor to learn traffic patterns in promiscous mode before deploying inline mode, otherwise ...
I'm currently having the following version on my ASA5505.ASA 8.3.1 ASDM 6,.4.5 I'm seeing the following new versions on support site and i would like to upgrade to the latest versionASA 8.3.1 ---> 8.4.4.1.EDASDM 6,.4.5 --> 6.4.9.103My question is 1...
Hi,I am designing a N/W with following equipment.1: 2 * Cores (4503)2: Single Firewall ASA-5520I have following design options;DESIGN 1:Core Switches are using HSRPVlans are active on one switch (primary) at a timeCONNECT BOTH CORES WITH ASAASA E0--...
Hello All,I'm going to be configuring failover with FWSMs for our 6500 at my job and I have a config question. There is one current 6500 chassis with 2 FWSMs installed. They are both online but currently since failover isn't setup, only one FWSM is a...
Hi,I have a cisco 5520 with 8.4.4(1) and I already have a NAT for an email server on it.Here is the IP and ports on current configuration:Email Server Private IP: 1.1.1.1Email Server Public IP: 2.2.2.2Email Server Local Ports : 25, 587Right now I ha...
On the ASA5505's, is it possible to get the features of the Security Bundle on a user count less than unlimited. Basiclly I'd like a 25 or 50 user ASA with the ability to have an inside, outside and DMZ I'm pretty sure units without the Security Bund...
We have several customers running ASA 8.4x code and all seem to be plagued with the ESMTP inspection bug CSCtr92976.I have tested this in the lab with an ASA 5505 running 8.4(1), 8.4(2) and 8.4(4)1 & 8.4(4)3 and the behaviour is always the same. I h...
