Network Security

Hi Expertswhen y configure ur IPS as IDS , does the 1 sensing interface must be configured with same VLAN as the monitored Portconsider my public interface on my asa connected to switch1 int gig1/1(vlan 5) and the sensing interface connected to switc...

Hi,Is there any way to accomplish this event applet from a router on the ASA? Thanks.event manager applet ClearNAT event track 123 state any action a1 cli command "clear ip nat trans *" action a2 mail server "192.168.1.10" to "coord@cpa.com" from "ad...

Hello,I have setup QoS Policing on some traffic, and have setup schedule as bellow:time-range Traffic_Scheduledperiodic  Sunday Monday Tuesday Wednesday Thursday Saturday 08:15 to 17:00the issue is as soon as the schedule time starts (at 8:15am) all ...

Since the "zero-downtime upgrade" is not supported, I would like to validate the process I put together for upgrading a failover pair of asa5550 with the characteristics below. Specifically I am concerned with the role of the standby during the upgra...

Hello,I am having a very strange issue with connecting new machines to reach the internet.We have a ASA 5505 which the previous tech configured the DHCP pool to 192.168.1.60 - 192.168.1.110We ended up reaching our limit which I changed it to: 192.168...

Hi there,we have a pair of ASAs, one of which I need to move. For that I would like to turn off failover to be on the safe side.Turning it off is described everywhere, but not how to turn it back on correctly (so that configs will sync again etc.).So...

Hello Folks,Hope someone can share any experiences they have with ACL changes on FWSM and what impact that has on the traffic going though the FWSM.Scenario I am facing at the moment, let me build the picture using examples;----Current SetupVLANs100,...

Hello,Can anyone help?I have a pair of ASA 5505 firewalls in a failover configuration. Everything works correctly until I install the IPS module into the secondary firewall. When install I can no longer ping the firewall from the inside network. We d...

Is it possible to automatically download updates from cisco site to a local machine and then use that machine as update server?I know the second part can be done 9using FTP,SCP) option in sensor configuration. But how do I automatically download upda...

Hi, I need to upgrade New version of ASDM in my asa, i done tht and with version 1.5.(55), and its upgraded successfully,now i am not able to login in my IPS,through that. can any bdy help me .Thanks

Hi All,As the topic : Can same security level command create identity nat? I found identity nat when show xlate debug command although no configuration related to identitiy nat for those subnet ip address.My brief configuration- same security level i...