Network Security

Just did Java update 7 and ASDM 6.4(7) quit working. I had to revert to a version 6 Java

Hi,We have an ASA 5520 which is in multiple context mode. We are trying to pass traffic from the outside interface to the dmz interface.I may be fundamentally wrong in the way i'm configuring this, but this is one ting im hoping someone may be able t...

Hi Team,Is there any option available in any of the Cisco ASA55xx series model to install both csc-ssm and aip-ssm ips modules ? If, so is it advisable to install both ?Is the throughput of ips module has any dependency with the asa chassis throughpu...

We got the below alert when we ran the PCI scan on our VPN firewall (use it for remote access VPN), did anyone come across this?OpenSSL SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG Ciphersuite Disabled Cipher Issue Solution-Upgrade to OpenSSL 0.9.8j or la...

Up until recently one of my sites was able to get to a postini subnet. Then we started recieving "host unreachable" e-mails. Postini told us SMTP traffic was not getting let in. I've compared the current config to a config that was saved before the i...

Hi guys,What is the best practices when deploying the IOS Firewall feature on routers, especially on the 800 series routers?I know that a router will never be a true firewall but those features are there to make them simulate...Usually what I do is t...

I want to allow ICMP traffic on ASA 5510 from LAN interface to DMZ. I've permit any traffic and added ICMP to the inspestion list also but still there is problem. Belos is the configuration. The image is asa822-k8.bin:ASA Version 8.2(2)!hostname fw-0...

I have setup a DHCP relay on my asa, I can see the request being forwarded to the backend server however I keep getting log entries stating:"UDP request discareded from x.x.x.x/137 to inside:y.y.y.y/137"Are there any options that I need to define in ...

In the configuration tool (CCO) I have seen that pix 3DES option now is no charge (0 cost).At this time in an existing installation with DES is possible upgrade to 3DESwithout charge?Thanks and regards

Hello everybodyI have a problem where I have a network that passes fwsm to connect to another network where this other network has a route back to the same input interface.Look the attached imageServer NY needs to connect in Server MD, I did the conf...

A client has two ISPs and two ASA's.  They want to use FAST ISP most of the time and NOTSOFAST ISPis FAST ISP fails for some reason.  I found a great configuiration doument using the IP SLA which I haveused in the past in IOS.  I have setup ASA activ...