Network Security

Hi all,I need to upgrade the fwsm image from 3.1(10) to 4.0(8). Can i do it directly from 3.1(10) to 4.0(8) ?Do i need to upgrade other image also along with Firewall version 4.0(8)?FWSM# sh verFWSM Firewall Version 3.1(10)Device Manager Version 6.1(...

Hi All,Can somebody explain me, how to block SSH tunnels on port 80? Is there any way to achive this.I tried strict http inspection, does not work. Websense doesn' t work - since discover only http headers.  RegardsRafa

Hi Team,we are observing the no. of conn thru asa 5580 is getting increased and one a fine day it will stop sending/receiving traffics.firewall# show conn count1900000 in use, 2000008 most usedAs per the datasheet of this asa, the max conns permissib...

Hi Netpro Team,Im looking forward to know more about how the traffic is going thru a firewall in an ipsec site to site vpn. I also would like to know "what are the field getting added in each step of the data formation though out this process".regard...

Could ASA do this NAT ?src: 192.168.1.1 des: 1.1.1.1 -> src: 2.2.2.2 des 3.3.3.3I assume that 192.168.1.1 is a host in the internal network and it has public internet access ip 1.1.1.1.ASA  has outside ip 1.1.1.1 and inside ip 192.168.1.254 (default-...

Dear all,I faceing a a problem with my nac and nam server i try to deploy OOB Virtual geatway. Both are connect each other and on NAM-- Device Management>> CCA Servers  > connected as the attachment..My nas server ip : 200.200.201.2My nam server ip :...

Hello Team,Could you please let me know if it is possible to provision 3 different public IP addresses to the same DMZ IP (Web server) on an ASA running ver 8.2(4)? Unfortunately, the way the server was provisioned Static or Dynamic PAT will not work...

I have been asked to set up remote access VPN on an ASA 5505 that I previously had no invlovement with.  I have set it up the VPN using the wizard, they way I normally do, but the clients have no access to anything in the inside subnet, not even the ...

HiHas anybody seen the same? The ASA creates RRI routes even for deny statements of the crypto map ACL. :-) So if you have a s2s VPN tunnel and you want some traffic not to be sent over the tunnel you make deny statements within the crypto map ACL. B...

Hi,I am trying to set up the proper value for a embryonic connection timeout on a Cisco PIX running 7.2(1). So far I have read some documents that describe how to set up the value but nothing concrete about what factors must be considered in order to...

Helloo ,I Was trying to establish ASA anyconnect vpn for Jabber but the mobile failed to connect . the logs appears that client software is incompatible . i don't know the solution for that ? . If any have established anyconnect vpn for jabber kindly...