Network Security

Hi,I have on my ASA threat-detection configured. I see the below in my logs:[ Scanning] drop rate-1 exceeded. Current burst rate is 10 per second, max configured rate is 12; Current average rate is 7 per second, max configured rate is 10; Cumulative ...

I have a mysterious problem with my Internet connection. The Edge topology is in the attachment so are the most important "show" commands. We have a 50Mb/s symmetric Internet connection. When we use Internet through ASA the download speed does not ex...

global (outside) 2 interfacenat (inside) 2 access-list dmzaccess-list dmz permit ip 21.21.0.0 255.255.0.0nat (inside) 0 0.0.0.0 0.0.0.0static(inside,outside) 3.3.3.0 3.3.3.0 netmask 255.255.255.0static(inside,outside) 3.3.4.0 3.3.4.0 netmask 255.255....

I hate feeling stupid but I can't seem to SSHlines enteredinterface Management0/0nameif managementsecurity-level 100ip address 10.1.0.194 255.255.0.0 standby 10.1.0.193management onlymanagement-access managementcrypto key generate rsa modulus 1024ssh...

Hi With reference to the above feature, is this possible to configure if you are using local auth.Here is the link to the Q & A for the feature/ config. http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_qanda_item09186a00805b87d8.shtml T...

Hi,I am having issues with PXE boot images for PCs cannot be loaded from remotely.The diagnosis revealed that SunRPC & TFTP were being inspected by ASA causing drop of packets.So I excluded these two inspections for the particular server behind the f...

Hi:   I  am wondering whether there are any protocols/mibs that can be used for discovering ASA/pix in network just like CDP for Cisco Routers/Switches?

Hi,I have a Cisco Switch CE500 and I need to function reliably dot1X. I used the "Network Assistant" and It did not work, dropped all ports connected to PCs that have the certificate. I have a network of switches running Cisco 2950/2960 with dot1x wo...

I have been delaying an upgrade past 8.2.5 because it is stable and I didnt feel like learning a new way of doing NAT because of the way the code was changed.  What is forcing me to go down this path is that I need to be able to let protocol 41 pass ...