Network Security

Hello PeepsIs there such a thing as One time Software upgrade for the ASA5520 firewall inc SSM-10 moduleCustomer doesn't have a valid support contract and would like to upgrade from asa 8.0.4 to 8.4.Does this one time software upgrade include adsm s...

HiI have a weird problem .I want to configure a zone based firewall but i have the folowing problem I have a router who performs router o a stick and a WAN connection . From the CCP GUI when i click add a zone i don`t see the interface GigabitEtherne...

I have a setup using an ASA 5510 8.2(2). In the DMZ (192.168.12.x) there is a server, switch and multiple cameras for surveillance of the site. In the Inside (140.152.25.x) are the pcs that can run the client software to view the video feed, or it ca...

Can anyone point me to a FWSM doc detailing IPV6 support? I know that V6 is only supportedin routed mode and there is no failover. Is there a roadmap or is the module being phased out?mike

Hi,We have two AIP-SSM module installed at Cisco ASA 5540 running at Active/Standby mode. I have configured IPS in a inline mode, before hand it was in a promiscous mode. After configuring it in a inline mode, IPS triggering two signatutures always {...

I have noticed that on IPS 4240 in our environment signature like AD-External TCP scanner,IIegal UDP scanner are firing from internal hosts which are not any known scanner machine ,just simple clients .At times the victim address is 0.0.0.0 and the p...

Hi Experts,I am facing problem while a configure below command in my ASA firewall-aaa authentication match access-list01 PROD Radius-serverit throughs below error-Hybrid configurations using 'match' and 'include|exclude' are not supportedUsage: [no] ...

Dear Member,I am faceing Teardown problem on cisco asa 5505.Users are always disconnecting 25-30 min from outside server.Here is the some log details.. |22:55:32|305012|10.60.2.144|1397|x.x.x.x|49563|Teardown  dynamic   TCP translation from inside:10...

Hello All,This is my first post in the IPS section, so I am a IPS newbie.....Can anyone tell me how I can block any skype traffic and facebook traffic using my IPS SSM-10 ?CheersColin

Hi fellas! I'm a little confused. It says that for the ASA AIP SSM-20 it has ipv6 support. Yet when I look for how to do it, it says that the ASA's Modular Policy Framework does not support ipv6. Any bright ideas on this one?http://www.cisco.com/en/U...

Hi All.I've got a problem on 887VAMG router. It drops important connections. As customer wants to have a firewall I created ACL and ip inspect rules ,but the router drops their connections to cloud and some websites are not opening. So I removed ACL ...

Our external security department needs to scan, every three months, a computer behind the firewall. I need to create a simple NAT rule that will allow an ip address or subnet to the computers behind the ASA 5505. At the moment, we have a simple NAT r...

Hi to all,I'm wondering what's the maximum throughput the CSC module can handle. Does anybody have numbers / experiences?A customer is experiencing bad performance when load on the outside interface of ASA is about 10 MBit/s. I don't know how much of...

global (outside) 1 103.191.12.3-203.192.13.34global (outside) 1 103.191.12.1global (outside) 1 103.191.12.2nat (inside) 1 10.20.216.0 255.255.255.0nat (inside) 1 10.20.217.0 255.255.255.0nat (inside) 1 10.20.176.0 255.255.252.0nat (inside) 1 10.20.18...