Network Security

Hi, I know this topic was already discussed before, and I already tried their solution but nothing happened. Bear with me if I'll post this again.Our company’s Cisco ASA 5520 CPU usage drastically increased up to  93% after installing the antivirus o...

Hi,How can I select specifc traffic for QoS when a VPN client connects?I have:class-map vpn-qos match flow ip destination-address match tunnel-group vpn-groupTo prioritise all traffic for a VPN group, but what of I want to only prioritise their HTTP ...

Hi there,Sorry for "spamming" this forum but we're new to the ASA and really want to get the most out of it.We're running three networks (inside, outside and dmz). Inside is 10.0.1.0/24, dmz is 10.0.2.0/24, outside is a static ip allocated by our ISP...

I see following message very frequent on ASA ASDM Syslog messages window; what could be possible reason of these messages and what is the remedy to it.[ Scanning] drop rate-1 exceeded. Current burst rate is 42 per second, max configured rate is 10; C...

I'm having some issues trying to get the Site 3: VPN Client to be able to ping to the Site 2: Server.  I have Just built the tunnel from Site1 to Site 2 and now have traffic flowing great from Site 1 to Site 2.  Site 3 clients can get to Site 1 clien...

Hi there,We recently purchases the Cisco ASA 5505 to get familiar with it, possibly buying more appliances for our branch offices. However, since the appliance is installed, our SIP telephones no longer register with our SIP service provider.The SIP ...

We've read everything about inspecting SIP packets and allowing them to pass through on port 5060, the default SIP port. However, our setup requires the ASA 5505 to allow SIP on ports 5060, 5160 and 5260.Is this possible with the ASA 5505?If it's not...

I have a 5505 that currently has inside/outside interfaces and everything is working just fine. I am trying to create a DMZ that will essentially be just for vendors/guests. the DMZ will have full access to the outside (Internet) but no access to the...

Hi there,With our below configuration, hosts on the inside network (10.0.1.0/24) cannot ping the host 10.0.2.200 on the dmz network. What do we have to add/change to make this possible? We also want hosts on inside to be able to do a Mac OS Remote De...

I am new to cisco ASAs and confused about the differences between an object group, network object and service object.Network and service objects are listed as new features in ASA release 8.3, while I see object groups in earlier ASA releases as well....