Network Security

Hi,We are going to start implementing WCCP. We want to configure WCCP2 on our firewall and redirect traffic from our inside interface to the web cache engine. I've read several Documents on the subject but it's still a little vague.If we want traffic...

Could anyone let me know what is the use / impact of adding one host IP in IDSM under - configuration- trusted host? I am trying to add a host IP which is generating legitmate traffic(to exculde this IP from reporting), however, I would like to get m...

Hi allwhen I migrated the ASA config from 8.2 to 8.3, in all groups the group members has been replaced by the IP address object. However, the "name" for this object has been migrated, but there is the "object network name" configuration missing.What...

Hi All,      THis is a common problem.      we have firewall and VPN router,  I know VPN router can deploy before or after firewall, and parallel.     which one is better!     thank you!Fly

Hi Guys,          I see that 113011 message id log shows user specific group policy. what is the difference between these two log?But i see they have different name. 113009 also shows vpn group name which is assigned to that particular user.<166>Apr ...

Hello,I would like to connect a second ISP link to our ASA 5510 to solely serve http traffic from our organization's employees (ie. web surfing). We currently have all employee traffic and two site-to-site VPN tunnels connecting to the internet from ...

I have a customer with a Cisco ASA 5510 firewall, an inside network containing a Genetec video recording server, and cameras installed on broadband modems throughout the area (each with a public IP). They've recently purchased Axis Q6034-E cameras th...

We recently have problems with some clent ftp to our ftp site when they were using ftp active mode. And the session was terminated by the FW, ASA 5580.%ASA-4-406002: FTP port command different address: 174.129.205.194(10.204.138.136) to ftp.ncbi on i...

Hi AllI was hoping that someone maybe able to help with an issue I am seeing, periodically we see the Internet response time is around 2000+ ms from an average of 20 ms. Looking at the logs this is all I see.27Mar2012 08:43:26.645 44831.515 cidwebser...

I'm getting the following error whenattempting to upgrade the signature file on a SSM-20:"Cannot parse the current config for the component signature definition instance sig0"

Hi,I experiencing an issue in setting up an ACL on my ASA 5510 to permit access only to the Nat subnet from inside to the outside interface. This firewall is setup for the DR solution in the production network. I am applying following acl in the inbo...