Network Security

So, fair warning - I'm new to ASAs and am open to advice on best practices if anyone sees any red flags here. I am trying to establish EIGRP neighborships with my inside switches (3750s) over the "Internal" interface, shown in green. The outside inte...

Guys,Need your experience here, ..By default, service resetoutbound is enabled for all interfaces. The formal definition of resetoutbound is sends TCP resets for all outbound TCP sessions that attempt to transit the ASA and are denied by the ASA base...

【事象】ASDMよりバックアップした設定情報のzipファイルをリストアするも、14%くらいでリトライを繰り返して最終的に失敗する。【OSバージョン】asa804-k8.bin【ASDMバージョン】asdm-61551.bin【検証機器】ASA5510×3台ASA5520×1台【詳細】以下の内容を実施しました。・お客様環境の設定をバックアップし、ASDMよりレストア実施→NG・工場出荷時の設定をバックアップし、ASDMよりレストア実施→NG・ASDMをasdm-632.binにて実施すると、概ね成...

I am trying to set up a hairpinning configuration for a client, wherein they have hardcoded their external IP address in their application for SQL access. From one of their servers the hairpinning works somewhat - a connection is established, but the...

we have a Cisco ASA5550 and stuck into continuous rebooting loop. it show an error :assertion "_vf_mode_init" failed: file "vf_api.c", line 99Earlier it has an 4GE SSM module, for some reason we want to utilize 4GE SSM module and we unpluged and afte...

Hello to alli am trying to add a line to allow the PIX to use an alternative ADSL Line when the first goes downIs it enought that i put a new line like this?currentt route outside: route outside 0.0.0.0 0.0.0.0 89.xxx.xxx.33new line i'll add:        ...

Hello,I have recently come across to need to troubleshoot why https (port 443) traffic going to facebook.com is not being redirected to the Websense server as http (port 80) traffic is.  I have configured a command to filter https traffic but our tes...

Hello,I've setup the AIP module in my ASA 5520 and all looks good.  I now need to do the following, does this config look ok?I want to inspect traffic on certain interfaces and exclude certain traffic. For example I don'e want IPS to inspect our repl...

Hi,I am having    Security License  (SL-39-SEC-K9)  for Cisco 3900 Series router, Can somebody help me to provide sample config to configure 3945 router to act as firewall. Is there any difference with the native IOS based firewall config..Regards,Mu...

Hello,We have an ASA 5510 which currently connects on its built in 100Mb ports to the Inside and Outside interfaces. We have just recently had an upgrade to our ISP and now recieve a 1Gb connection, we also have 1Gb switches inside our LAN. So we are...

Hi there,i have a problem with Routing on ASA 5505.Here is a brief explanation of the topology:DC Upstream IP: 77.246.165.141/30ASA 5505 Upstream to DC IP: 77.246.165.142/30Interface outside.There is a Cisco Switch connected to one of ASA Ethernet po...

Hi All,I am facing an issue with my IPS appliance.I am able to login to the device but it does not give me a prompt after that. It does not go beyond the NOTICE that comes up in the begining. It get stuck here:***NOTICE***This product contains crypto...