Network Security

Hi,Recently i have upgraded the IOS of ASA5550 (in HA mode) to 8.4.2 from 8.0.5, after OS upgrade we found that the syslog from thses firewalls are not getting captured/transfered to centralised syslog server. The server is reachable from the firewal...

I just need a little help with one simple custom signature.I am running a ASA-SSM-10 on a ASA5520.IPS Version: 7.0(7)E4I've been trying to customized a signature to send/log alerts if someone is accessing www.dropbox.com and can't get it to work.I ha...

I have recently procured ASA5515-IPS-K9 for my own R & D. In that device I want to achive following milestone:Perform static routing , relay DHCP, cache flowEnable IPS with auto updateQoS for Voice and WAN traffic Protect regional Campus/LAN, WAN, re...

Dear ColleaguesI am trying to get the graph for the outside interface of PIX fire wall, with the use of ASDM.After selecting the desire interface and graph type, when clicking to show graph, nothing is comingcan you please high light if anything need...

Hi All,I have a question about my ASA 5520, it worked well till two weeks ago, and suddenly cannot be accessed by SSH/Telnet/TFTP....only can use the Consoel port to access it now, but other VPN/ACL setting working well.Below is the SSH and Telnet se...

Packet flow on ASA 8.3 changed ?In Earlier version 8.2 we used to put permit statment on mapped interface however in OS starting 8.3 access-list entries should have real address .ExampleLan Server/Real ( 192.168.1.2 )Outside IP/Mapped ( 202.202.202.2...

Hi All,We heard that ASA ver 8.4 has PBR. Do we have some guidelines on how to configure PBR for ASA and can it do routing based on URL?Thanks!

Existing nework New NetworkHi all,I have attached some diagram here,2911 Router configured as a zone based firewall and it works fine.I need to put ASA 5510 as an internal Firewall in to the existing network.So I need to hand-over the NATing configur...

Hi,We need to have one connection with less internet bandwidth assigned to it than all other other connections. Basically it is a separate conection from all others, incomming just from one switch port and separate VLANI know this can be done on the ...

I am not able to get to the internet from my DMZ ip address.Here is my config.interface Ethernet0/0 switchport access vlan 2!interface Ethernet0/1!interface Ethernet0/2!interface Ethernet0/3!interface Ethernet0/4!interface Ethernet0/5 switchport acce...

I have several interfaces:outsideinside(192.168.0.0/24)wifi(192.168.101.0/24)haklab(10.10.10.0/24)Currently I have remote access anyconnect users who are able to VPN in and get access to the outside internet and inside devices.I am trying to add anot...

I have a FWSM cluster that I exceeded the maximum number of static nat entries on.  i migrated the connectivity off to a pair of PIX 535's that seem to be handling the adderess translation needs.  however the number of NAT entries being required is i...