Network Security

I am changing out a Cisci 5505 for a 5510, however i am having issue with the vlansWith the 5505 in place eveything was working well, upgraded to a 5510The devices behind the FW on the 192.168.x.x network can no longer communicate.THe configs are bas...

Hi Experts,I am facing memory utilization problem in my ASA firewall (ASA 5520) with 512mb memory and 256mb flash, suddenly the memory utilization reached around 80%.After analyzing the issue we found more idle sessions (around 10000) and the same ha...

Hi,We just changed ISPs and now have a /29 routed subnet to be used on our ASA 5510 (8.4) instead of the one public ip we had before.There are a couple of PAT translations that were previously setup on the "interface" address which i now want to assi...

Hello,I have tried the below configuration to block the P2P traffic.But still the users can download using utorrent client. How do I effectively block all the P2P traffic. Please help.Class Mapclass-map type inspect match-any ALL-P2P-PROTOCOLSmatch p...

I am running the SSM-10 off of an ASA 5510. While using the IME application, no data shows up under any gadget and I get the meeesage "No Data available to display" at each gadget. The gadgets that are showing this are Top signatures, Top attackers, ...

Hello, I'm having an issue allowing legitimate network traffic out. My ASA logs are filling up with: %ASA-4-419002: Duplicate TCP SYN from inside:192.168.1.41/xxxx to outside:172.16.1.215/xxxx with different initial sequence numberThe traffic is know...

Hello,I got following error message when login into IPS over IDM, after error is displayed IDM is closing.errSystemError-ct-sensorApp.463 not responding, please check system processes - The connect to the specified Io::ClientPipe failed.SSH login wor...

I'll have to check into the deetails again but I recall there being a way to change the listening port for SSH.  Not only do you have to configure SSH itself to listen on a new port but I think there was something about making the inbound interface p...

Is it possible to have multiple NAT translation for same IP We have a NAT statement as follows.10.0.0.1 -- > 100.10.10.1010.0.0.0/24 - 10.0.0.0/24 - Identity NAT for the traffic between same ranges. But this is not using when we have the first nat ru...

Hi ..My ASA run OSPF dynamic routing, I want to "clean up" route table by set AD for OSPF by 255. But in route table there is still route for it although it have AD 255.Anyone have try this ?BR

I was configure 3 interface on ASA1st - managemetn (only for management)2nd - gig0/0 is connected to internet with real IP3rd - gig0/1 is connected to local networkI was configure routed NAT to internet.But I have problem with restriction incomming t...

Hi;We have struggled with this for months and no one seems to have a solution.Our CTO has ordered us to block all IPV4 packets from many countries such as China, Iran, Russia, Nigeria, North Korea, etc. Please don't side-track the discussion with rea...