Network Security

Hi guys,I have to allow the ESMTP traffic from a defined IP address. I know that the following statement allows me to disable the inspection but I would do more, limiting the "no inspect esmtp" to a single IP address.conf tpolicy-map global_policy  c...

Hi,We have uprade our IPS 4270-20 appliances (10) to new version of 7.1.(4)E4, after upgrade we see that out of 4 CPUs, 3 CPUs shows are 100% (CPU 1, 3,4).However when we check the inspection load its less than 40-50%. Looks like this may be a bug bu...

I have a brand new out of the box ASA5505.  I can connect with https://192.168.1.1 and login with blank username/passwordFrom there I get a screen that tells me I can either- Install ASDM Launcher and run ASDM or- Install Java Web StartIf I choose th...

I've purchased a used ASA 5505 device.  Upon reseting and looking at the startup, I see that it is unable to retrieve Activation License and used default.  Activation License shows as all zeros.Is there a way to find whatever Activation License is ti...

Dear Friends,I have 3 ASA5520, 2 of them running as remote access VPN, 1 of the ASA as site to site VPN. There are 2 differentISP's which are used between them. Can I consolidate all these services in 1 ASA5520, relating to configuration andwhether t...

Hello guys.I want to sniff reverse telnet sessions, and see in the logs, if someone tried to break the device.That's really interesting what I found today. There is a few captures from wireshark.When we are using port 23 for telnet connection, everyt...

ASA 5505 Firmware 8.3(4), ADSM 6.4(2)Here is what I am trying to do...I have a public IP address of 168.87.3.4I need to forward ports (5060, 5080, etc.) to one internal address. (192168.1.1)I need to foward different ports (10020-10080) to a differen...

Hi Team,My asa-ssm-40 card is in unresponsive state. i know how to bring this card and the command would be hw-module module 1 reset.My query is, what could have gone wrong for the ssm card to go to unresponsive state... my version is 7.0.7E4        ...

I need to have the response from a server to reply to a second ASA.  We have a firewall for voice traffic, that only has a few routes pointing to it, the default route for the network is out another device.  This would be simple if I could change the...

Hi guys:I'm checking a Router which I installed the IOS firmware 593 and I'm receiving this message Dropping icmp session 10.x.x.x:0 189.x.x.x:0  due to  One of the interfaces not being cfged for zoning with ip ident 0Does anybody got this message be...

So I have a Websserver that is being monitored from the inside of my network for the availability of port 80. The server is in my DMZ. Couple times I have made changes to an ACL or something in the ASA and caused access from the Outside to the DMZ to...