Network Security

I have turned on anti-spoofing on all interfaces on an ASA 5520 HA pair running 8.4(3).I am getting some RPF fails, but when i check some of the source and destination addresses i dont see why it has failed.The source packet came in on the inside int...

I have installed ASA 5520 firewall and 1841 Cisco router. firewall is connected to internet and the router. Router is connected to Network. There two networks available. I have completed the configuration. but problems. i dont know how to do the band...

Hello,    Just started using our ASA 5505 v8.2 (1)Trying to configure the ASA applaince to allow access into an internal resource (i.e want to be able to RDP into a system behind the ASA from the internet).I have used a static NAT:static (inside,outs...

I am migrating an asa 5520 from 8.2 to 8.3 and after the migration the ACL's are blocking access to the DMZ. It looks like the NAT functions were migrated properly by the migration tool but now when I try to access devices in the DMZ the ACL is denyi...

Good morning,I have been configuring a cisco ASA 5520, everything is working fine but when i create an ACL: access-list OUT extended permit ip 172.16.x.x 255.255.255.0 anyaccess-group OUT out interface outsidei added ports like www or 443 and it is n...

Hi Guys, facing an issue here and need some expert knowhow....I have several interfaces on my ASA  that is also connected with S2S  to the HQ office...i have 3 /24 subnets heavily subneted inbetween interfaces and have a collapsed core as well so any...

Hello,I have a ASA5510 running asa841-k8.bin and ASDM 6.4.The CSC-module is a ASA-SSM-CSC-10-K9 running CSC SSM 6.3.1172.0.The module is reachable via ping and session via cli.If I try to connect via ASDM I get the error, that the Management-Port of ...

I would like to understand what configuration pieces need to be in place for SunRPC inspection to work properly. I have the following scenario: NFS server is on higher security interface, and NFS clients are on lower security interface. I have defaul...

Hi,I'm trying to migrate a configuration of an ASA 5520(Version: ASA 8.0(5)) to an ASA 5585 (Version: 8.4(2)). I keep getting some errors which are included below. I've been struggling with these for some copule of weeks and read the documentation on...

Hi Support people,I have been trialling IOS IPS on a number of Cisco ISRg2 routers and I have found that after enabling it the CPU jumps to 99% and I see packet drops (ingress) on the interface that IPS is applied.Has anyone else successfully deploye...

Have been running new sensor for about a week now.  I implemented in promiscuous mode as the documentation seemed to indicate that inline will tend to bottleneck internet traffic.My questions are :Are you running in inline mode and what can I expect ...

I am tyring to remotely diagnose a troublesome ASA5505 It is connecting via PPPOE and the original suscpicion was that the PPPOE was going down during heavy loads during the day, i.e 9am and lunchtime. I suspected MTU and have verified the MTU outsid...

HiHave cisco ASA5520 on place and i want to configure it to access my webserver outside of my network throught sftp/ftp with filezilawhat command to add so as port/service associate to it should be able to run?thx very muchJoseph

I was wondering if someone can tell me how to upgrade a Cisco Pix 525 boot rom from 4.0 to 4.3. Is it a physical chip or software upgrade? Is it needed to upgrade to latest IOS on Cisco Pix 525 to 8.0. Where can I find more information on it?  Thanks...