Network Security

I have an ASA 5505 current f/w & the security plus license (to get the 3 nameif interfaces). Can I split traffic between two ISPs, (VPN traffic to one destination on a T-1 on one VLAN, and all other traffic using DSL to another VLAN) and using a diff...

Hi,The following time,IPS could not connect to cisco.com.14Jul2012 16:50:01.939 28796.397 mainApp[360] Cid/E errSystemError AutoUpdate exception: HTTP connection failed [1,0]15Jul2012 00:50:01.919 28799.980 mainApp[360] Cid/E errSystemError AutoUpdat...

Hi, In last month I found latest released IPS software version 7.1(5)E4 for IPS appliance 4260 on cisco site.However it is no more available over there now can I have exact download location of the software upgrade as I want to upgrade my device with...

Can someone help clarrify some things.  I read that WCCP is supposed to support failover.  I want to WCCP redirect some web traffic to a proxy.  If that proxy is not avvailable the I want to redirect it to another "backup" proxy but when looking at t...

Hi,I have a server (172.16.10.1) inside the LAN and IP of the server has been maped to public IP 41.219.130.10.Topology                                                                             Server(172.16.10.1)DNS Server (8.8.8.8)  ----- Outside...

The   IPS-4240-K9  [IPS Version 7.0(4) E4] is deployed in inline mode before the ASA and perimeter router .The design is  LAN->IPS->ASA->Internet Router.The problem is that when i am uploading on the internet the IPS inspection load increased to 100%...

HelloI have a vpn setup which is working on a Pix 535 firewall. I have more then 100 VPN accounts but my problem is that the vpn users are getting ip address from a common pool and i do not have control on the IP address. I want to configure the syst...

Dear allWe have a cisco firewall ASA-5510 which is configured to connect our users to one ISP. Recently we added new ISP and our company wants to connect both ISP to the network. I configured both connections but to make our user use internet we need...

      Where can i find information on the Processes/threads shown, when "show processes' command is executed on  ASA version 8.2(2)?  I'm particularly looking for information on DATAPATH-0-562 ---- DATAPATH-7-569 processes. We are seeing CPU load aro...

I need some firewalling and I need some routing.  But I only want to buy one.  So basically do I buy a Router and do firewalling on it or do I buy a Firewall and do some routing on it?

I have this issue,Two Vlans (ID 1 and 100)are on a Cat 4500, which connects to an ASA, interface DMZ. On 4500, there is default route point to the ASA DMZ interface, please see the attached files.Issue, server on vlan 100 cannot ping a server on Vlan...

I'm running an IPS and i would like to know the parameters to block a specific IP when creating/configuring a new signature. I'm trying to block youtube's IP address by signature and be able to see the alerts-logs of computers trying to access it.I k...

We had upgraded 3 of our firewalls in the last week. Those were ASA 5510s and were running on 8.2(2)16 before. They were upgraded to 8.4(4) last week. We have Wireless Access Points in the external segment (outside firewall) and after the firewall wa...

I'm working on an ASA that currently sits behind another device that the ISP equipment terminates on.  The device has the real external addresses for the network (A.B.C.100) and it has a private range of 10.0.0.100 for the internal network.  The ASA ...

http://www.cisco.com/en/US/docs/security/asa/asa82/system/message/logmsgs.html#wp4770603So, according to the above link, if in message ID 302013 or 302015 you see the keyword "outbound" it means that the addresses are flipped in the SYSLOG message. I...