Network Security

I need to be able to report on a count of Accepted and Dropped connections due to policy on the Outside interface on a monthly basis. The outside interface is ifIndex.3 . Support gave me the below OID, but I'm not convinced its correct. I also cant s...

Hi,I have this error when I try to migrate a policy NAT from 8.2 to 8.4:Addresses overlap with existing localpool rangeERROR: NAT Policy is not downloadedThe original 8.2 configuration works and I created a static NAT for an INSIDE_HOST (with EXT_HOS...

Hi,We recently deployed FWSM in our Data center & moved different VLANs behind the different zone.For some zones we got the policy from the server administrator & we restricted that zone based on that but for some zone we couldn't able to get any pol...

I have quite a few businesses/schools in my area that seem to be using some sort of CISCO AP equipment.I'm not quite sure the model but I know when you connect, you get redirected to 1.1.1.1 and have to either hit accept or fill in your email and the...

Hi,I am trying to restore a IPS configuration after a re-image with the same version.Model: AIP-SSM-10I get the following error:Error: Invalid configuration: 'Error: /enabled/password/ -- the value is empty and has no defaultExample:sensor# copy ftp:...

I have a faulty ASA5520 and I am not sure if I have a SMARTnet contract for it or not (I manage over 200+ ASAs)The problem is that the Serial Number sticker that is normally on the back of the ASA is missingThe ASA5520 is also faulty and doesnt power...

I was just curious if there are any performance benefits of using multiple network objects on multiple rules vs consolidating them into fewer rules by grouping them?  For example, I have about 10 lines of NAT exempt rules from the same source to mult...

I'm looking at upgrading our T1 to a 10 mbps EoC connection.  Currently we have a 506 PIX.  What ASA model would be a good replacement.  We are a medium size manufacturing company currently with 80 workstations accessing the internet. 

I have an ASA 5505 in transparent mode. The device mac address table is always empty.  show mac-address-table and show mac-learn both come with empty response.any idea?thanks,Han

Quick question. I have a site - site tunnel that is up and running between a Pix 515E and a 3050 appliance.Tunnel is up and running but on the pix side I dont see traffic from a couple of subnets behind the inside interface.On the vpnallow access lis...