Network Security

Recommended embryonic connection timeout

Hi,I am trying to set up the proper value for a embryonic connection timeout on a Cisco PIX running 7.2(1). So far I have read some documents that describe how to set up the value but nothing concrete about what factors must be considered in order to...

Configuring ASA any connect for Jabber client.

Helloo ,I Was trying to establish ASA anyconnect vpn for Jabber but the mobile failed to connect . the logs appears that client software is incompatible . i don't know the solution for that ? . If any have established anyconnect vpn for jabber kindly...

Problem with NAT statements disappearing on 5540 8.4(3)

Unusual problem with as ASA5540 running 8.4(3). There are several NAT statements defined. Some of them are of the format:"nat (<interface>,any) source static <network-or-group1> <network-or-group1> destination static <network-or-group2> <network-or...

Resolved! TLS not fully supported in Cisco IPS 4240

I am trying to communicate with a Cisco IPS 4240 device using SSL while having the FIPS security setting enabled on the client. This is not possible because the device does not support the TLS extensions in the Client Hello packet (RFC 5746) being...

Return reply packet hits different ACL of CIsco ASA

Hi I was analyzing the traffic log of Cisco asa firewall in ASDM and observed that it showed traffic permitted aganist any any ACL installed in ASA for outside->inside traffic(But traffic intiated from inside->outside). I had newly depolyed a firewa...

Pix to ASA migration tool

I used the Pix to ASA migration tool to create the target configuration for the ASA. How do I install the new config file on the ASA?

routing on asa

L3 sitch is connected to firewall and firewall is connected to routeron l3 network 10.0.0.0/24172.16.0.0/24and default route is to firewallfrom firewall default route is ROUTE OUTSIDE 0.0.0.0 0.0.0.0 202.x.x.x(router)I have another router my require...

Unable to upgrade IPS 4240 signature from S637 to S640

Hi friends,Thanks in advance.I am unable to upgrade IPS 4240 to the latest signature version showing error"Cannot parse the current config of the component "signatureDefination" and instance "sig 0"attaching tech-support...Please suggest if any issu...

Resolved! ASA 5510 Inter-DMZ NAT and connectivity issue

I have an ASA 5510 with sub-interfaces configured for multiple VLANs traversing a trunk on Interface 0/2; these interfaces are all DMZs - they all must reach a fellow DMZ VLAN that contains a domain controller:interface Ethernet0/2.184 description VL...

Resolved! Correct procedure to replace failed secondary ASA unit

Helloi just received a RMA for failed ASA 5520 that was acting as secondary unit in multicontext configuration. What would be correct procedure to install it back in production? Do i need to restore backed up config of the fallen unit or is it just e...

Cannot enable DPD for site2site VPN.

I have ASA 5510 on one side & 5505 on the other. Both have 8.4.3 ASA & 6.4.7 ASDM image.When internet channel on the side of 5510 or 5505 goes down ASDM still shows that vpn is ok, but in fact it's not After I manually right click on channel & logout...

ASA 5520 topology question

Default Gateway: 10.1.1.1/24Router2: 10.1.1.1ASA5520: 10.1.1.100 g0/0: outside , connected to DepSW g0/1: inside1, connected to SWA g0/2: inside2, connected to SWCPC1: 10.1.1.11PC2: 10.1.1.12PC3: 10.1.1.131. Blocking unwanted traffic from...

Routing from LAN to public IP assigned to firewall

I wanted to verify something I believe cisco at one point told me about routing from inside to the outside interface.My firewall is assigned the network for the outside interaface. 206.168.224.1/28. The inside interface is assigned 192.168.1.1/24. Th...

Allowing FTPS access in ASA 5510

Hi Experts,We had an ASA 5510 as a firewall in our environment, and there is a requirement to access an ftps server from our location. Currently from the server location they configured everything by allowing our public ip to their server and gave th...