Network Security

It is my understanding that the FWSM for the 6500 series switches uses a 6 port Etherchannel on the backplane to communicate with the 6500 series switch.Can you shutdown vlan1 on the switch and still communicate with the FWSM? I was under the impress...

Ok, I can't for the life of my figure out why internal syslog traffic would be dropped at the firewall.  I've come across a few support forums with comments like 'disable the specific syslog error, etc.' however this does not fix my problem.  I need ...

Does anyone know the significance of the output of "show memory app-cache" command on an asa firewall?I am mostly interested in what is going on when the "SNP Run-time Inspec" count hits the 325 limit...pertaining to troubleshootingS2S tunnels.  I sa...

I have a question about the threat detection on ASA.  We use to have a custom script that ran against Pix firewalls that more or less did the same thing as threat detection.  We have since discontinued using the script in favor of the built in threat...

I've been trying to configure this Cisco ASA 5505 for days now. I used to be able to use the ASDM gui application, but i've since transitioned into using the CLI. Trying to go back to ASDM, it won't let me get back in, and when i try show asdm image,...

Hi all,Wonder if anyone has experience of this and can give some advice/tips.I have a Failover pair of ASA5550's running ASDM 6.2(5) and ASA 8.2(2).  Originally they were setup with 2 context's and an admin context but one of the contexts has now bee...

    Hi allThere is nothing in this PUBLIC subnet a.b.22.1/24, no one server.Why and where does a lot of traffic and so many requests on TCP ports 6666-66692911BGP#sh int g0/2GigabitEthernet0/2 is up, line protocol is up  Hardware is CN Gigabit Ethern...

hi,im using a cisco 5520 with 8.4, i try to test my appliance with a syn attack on my published server behind my asa on port 80 and this really really put out of the game my firewall.i used hping security test tool with this commaband .hping -i u1 -S...

Hi all,I configured the ASA failover for one of our customer. The actual problem is that if one interface of the active ASA fails it doesn't switch over to the standby unit. We have to shutdown the primary unit to bring the standby to the active stat...

Hello all,I have a small branch 871 which is about 1800km away from me. I want to remove the complete ZBFW from the router (configured through SDM once) and start from scratch. Obviously I don't want to lock myself out, although there are people onsi...

Trying to set up a stateful failover with two. asa5510Here is what I have so far, tell me if this looks right. The ip address are set to 0.0.0.0 only for this discussion. Config Primary Firewall:config tinterface management 0/0 ip address 0.0.0.0 255...

I have a cisco asa running 6.3   I would like to allow HTTP POST method from specific IP range to a specific server.all other IP addresses should only be allowed normal HTTP access to webserver.   I tried to write up the policy map but getting a bit ...

Hi,ASA running 8.2(5).When I enable ip spoofing on my network interfaces I see this getting logged:Deny UDP reverse path check from 10.100.100.102 to 10.100.100.255 on interface SPECTRA-LANThis is because interface SPECTRA-LAN (VLAN50) is the interfa...