Network Security

Dear ColleaguesI am trying to get the graph for the outside interface of PIX fire wall, with the use of ASDM.After selecting the desire interface and graph type, when clicking to show graph, nothing is comingcan you please high light if anything need...

Hi All,I have a question about my ASA 5520, it worked well till two weeks ago, and suddenly cannot be accessed by SSH/Telnet/TFTP....only can use the Consoel port to access it now, but other VPN/ACL setting working well.Below is the SSH and Telnet se...

Packet flow on ASA 8.3 changed ?In Earlier version 8.2 we used to put permit statment on mapped interface however in OS starting 8.3 access-list entries should have real address .ExampleLan Server/Real ( 192.168.1.2 )Outside IP/Mapped ( 202.202.202.2...

Hi All,We heard that ASA ver 8.4 has PBR. Do we have some guidelines on how to configure PBR for ASA and can it do routing based on URL?Thanks!

Existing nework New NetworkHi all,I have attached some diagram here,2911 Router configured as a zone based firewall and it works fine.I need to put ASA 5510 as an internal Firewall in to the existing network.So I need to hand-over the NATing configur...

Hi,We need to have one connection with less internet bandwidth assigned to it than all other other connections. Basically it is a separate conection from all others, incomming just from one switch port and separate VLANI know this can be done on the ...

I am not able to get to the internet from my DMZ ip address.Here is my config.interface Ethernet0/0 switchport access vlan 2!interface Ethernet0/1!interface Ethernet0/2!interface Ethernet0/3!interface Ethernet0/4!interface Ethernet0/5 switchport acce...

I have several interfaces:outsideinside(192.168.0.0/24)wifi(192.168.101.0/24)haklab(10.10.10.0/24)Currently I have remote access anyconnect users who are able to VPN in and get access to the outside internet and inside devices.I am trying to add anot...

I have a FWSM cluster that I exceeded the maximum number of static nat entries on.  i migrated the connectivity off to a pair of PIX 535's that seem to be handling the adderess translation needs.  however the number of NAT entries being required is i...

Hi all,I want to know the best way to check failover in ASA environment ? I wanted to know if I can stop an ASA CONTEXT to force failover ?or any other way .Thanks

         Hi Guys,I am facing high CPU util on my pix 515 E which is in failover mode.During peak hours the util is see rising to 60% where as in off peak hours it is normally12%.During normal operation the average utilisation was observed to be 30% b...

Hi allDo anyone of you know of a tool that can accept a list of ip-addresses and spit out their origin.BackgroundI have a list of addresses that have scanned and attacked a target over night.I wish to show what good use we have of our firewalls and w...