Network Security

I know that I've run into this before but I can't remember the fix.  I have a 5510.  The 3 interfaces involved are INSIDE, OUTSIDE, and GUEST. Corporate users are allowed to put their iPhones on the Guest network, but the problem is that their Exchan...

We have 2 ASA 5510's setup in an active, standby failover configuration. When the primary fails over to standby, the 3rd party cert does not failover to the standby ASA. The users then receive the CERT missing, invalid message and have to select yes,...

Hey all,We are experiencing an odd issue that may be related to our FWSM. Our DBAs are experiencing timeout issues when running Oracle SQLNet queries for connections that are anywhere between 30 minutes and 60 minutes idle. I can say with certainty t...

Is there any way of showing the currently assigned ip address for an interface configured to use DHCP on an ASA 5505?gcx# show running-config interface vlan 2!interface Vlan2 nameif outside security-level 0 ip address dhcp setroute does not give me t...

My ASA 5505 has stopped giving out DHCP address to my machines.Everything was working fine and nothing has changed in the network. I've reloaded the firewall and clear all DHCP on the firewall I've even re-entered the cmd on the ASA. I'm able to stat...

Everyone,   A few months back, I was given the responsability of managing our firewalls. I know routing, switching, voip, unity but no security. Although the firewall management piece is outsourced, it takes time to implement something because our pa...

                   I have a asa5520-k8 with 7.2(4) that I found an NAT that was missing but before I can enter it I had run two commands below in order to enter it and I need to understand why if the xlate entry did not exist..  no alias (inside) 10....

Hi AllWe have to add some nating configuration to the ones that we already have.Actually we nat all the inside traffic from our ASA 5520 to the outside public IP.We recently add a new public IP network from our ISP.  We want to nat a specific inside ...

I would like to get some sort of IDS box for my lab to work on while I study.  Any recomendations? At my workplace we use SSM modules in our 5540's but we dont have nay in a lab environemnt and I really dont think they would appreciate me flipping sw...

I have been told that if an access list is created with the suffix _access_in, that if the preifx is the name of an interface, then that access list is automatically bound to that interface, even if there is no explicit command doing that.I looking a...

Hi,In my syslog server configured for Cisco PIX 6.3,I see lot of Built and teardown connections.Logic says if something is built then there should be a teardown.But I do not see teardowns for some connections even though I know that path is already b...

Hi there,I'm new to the ASA 5505 appliance and have a few very basic questions. Hope I get some responses and not flamed for being a total newbie. :-)Inbound versus outbound: I'm having a difficulty understanding the inbound versus outbound terminolo...