Network Security

Hi Experts,We had two PIXes in our environment and working as a active-failover mode. Its noted in now a days the active PIX memory utilization is 98% and for standby PIX it is 96%. And also in some times we were experiencing packet loss to the ip of...

Hello,I'm on an ASA and have to amend an access list, but is says the source group is "object-group network DM_INLINE_NETWORK_72" what is this and how can I see what IP's are included in it?Thanks

Hello Experts,I have 2 question for FWSM, and i hope i will get answers from you'lli created interface vlan 100 on FWSM and enable telnet for that interface i was not able to telnet, but when i created another interface interface vlan 200 then only i...

I have ASA that just started to reboot through out the day yesterday. It seems to happen every few hours but not in a pattern.Right before it reboots there is a flood of sys log id 305006 messages "portmap translation creation failed for tcp src insi...

Hi,I have been asked to create an inbound connection on the ASA from the internet to a part of the network that is accessible over the Wide area network egInternet address  94.175.x.100 goes to 151.5.3.100,The internal network is 10.42.15.0/22, and c...

Hi All, I have a rule in place on the DMZ interface to allow all traffic through from 192.168.203.14 to anywhere; I get the message below but not sure what it means, please advice if you know:Feb 24 2012 10:39:44: %ASA-6-106100: access-list ACL_DMZ_I...

Hello Community;When users are VPN connected their telnet sessions timeout after an hour of inactivity. Looking at the connections on the firewall they are showing as idle. Is there a configuration change or something else that has to be modified?Any...

Hiwhy we need firewall for the server farm?thanks

Hi,in the FWSM we have too many "deny tcp (no connection)" log and tcp connections disconnect randomly. some log events:Deny TCP (no connection) from 10.4.2.1/80 to 10.5.46.2/1395 flags ACK on interface inside.

Please assist in a design problem we have iminent.  I need to replace an ASA with an IOS firewall router, and am not sure how to migrate the NAT configuration.  Specifically, there is an interface "3rdparty" that has onward connectivity to other priv...

Hi, Should be a simple one this, but damned if I can work it out!I've TFTP'd a config from a PIX and modified it for use with an ASA 5510. On startup I get:WARNING: conflicting statics in startup configuration*** Output from config line 1021, "static...