Network Security

Hi everyone,I have a slight issue with one of our ASA 5510's.I am getting flooded with "Deny IP spoof from (192.168.50.XXX) to 192.168.102.XXX on interface inside"The 192.168.50.XXX in actually the ip address of the inside interface of the ASA and th...

We have a corporate network and when any user tries to download a pdf  file from a specific site i will fail about 95% of the times.The site  is www.mineduc.cl. I've been monitoring the firewall using ASDM and  filtering mi ip address and i got the f...

What is the maximum number of ASA5520s you can configure for a firewall failover in a cluster?  The documentation mentions 10 appliances but that seems to be for VPN only. 

Hi,We have a transparent firewall (fwsm) between 2 ospf neighbors.Although the ospf neighorship is formed and the ospf neighors are placed in FULL state the neighborship is teared down after dead timer expires.It seems to me that ospf hello is not pa...

Hi,Has anyone figured out an easy way to convert custom SNORT signatures to the Cisco IDS? There seem to be a lot of parameters that don't really match in the Cisco World to the Snort world and I am wondering if this is something that people are tryi...

HiPlease send me the document regarding above config.

Hi CSC,I have a question,If ACL does not allow host to communicate, why is not the source IP be the firewall interface that deny the communication? This is detrimental as it does not reflect who is the root cause. Any way to reflect who is denying th...

Hi,Since I couldn’t find it in the internet, I hope I can find it here.What is the difference between teardown & deny in Cisco ASA syslog message?Thanks in advance

Hi All,I got a situation here for Nat-ed IPs i configured. I expected to open some ports on the interface to allow certain traffics to pass through, yet there are some of them are failed. Down is my current config.object-group service DM_INLINE_SERVI...

Hello,I have a Cisco 2811 running Advance Enterprise v 15.1-2.  I've just configured it using ccp for internet access (on 2 lines) and a firewall.  The configuration is pretty much all default and I used the ccp wizard to create a 'medium-secure' fir...

I have installed a new SSL certificate on our ASA 5500. I removed the old one, installed the new one. And associated the trustpoints with the interface we use for Web Connect and AnyConnect connections.They are still seeing the old expired certificat...

Hi Experts ,We are experiencing high memory utilization in PIX 515E firewall . It has 128MB DRAM and the average utilization stays mostly at 99% which is quite a concern now . Remote Access VPN Users are unable to connect with the following error whe...

Is it possible to relay traffic out of the same interface?  For instance we have a computer on the Internet that only is accessible from our network.  I'd like users to connect to our network, look at the ACL, and then connect to the remote computer....

I may have phrased the topic not too clearly, but I have an external domain name of mail.company.com , I want my users INSIDE the company be able to also get to https://mail.company.com , currently they cannot (nothing loads, looks to me as if firewa...