Network Security

Got no errors in the logs but when I try in packet tracer, I get IPSec Spoofing errorFrom 192.168.0.10 to 192.168.1.2Heres the config: Saved: Written by enable_15 at 13:18:17.890 UTC Thu Feb 16 2012!ASA Version 7.2(4) !hostname ciscoasadomain-name de...

Hey Guys, I'm sure you can help me. I have a ASA 5510. I setup basic configuration to test internet with 2 ISPs. My first line works with out any problem. But my second line doesn't work. Even when i wipe the configuration, and setup only my second i...

Hi All,I have a new ASA 5510 running 8.3(1) and ASDM 6.4(5)I am trying to use the real time log viewer to help troubleshoot some access issues, but I am getting delays of up to 30 seconds or more between my client conecting to the ASA and the corresp...

Buenas tardes,La firma 5403 "OpenSSL SSL/TLS Malformed Handshake DoS" me genera alertas de tipo medio, muchas veces al día. Lo extraño es que quien las genera con mayor cantidad de eventos es el servidor Proxy (ISA Server), la verdad no tengo claro p...

I just updated my SSM-AIP-40 module with the new signature and can no longer connect to it using IME. Ssh still works but I do not get any login prompt after the authentication. Any assistance will be greatly appreciated. IPS-sig-S626-req-E4 is the s...

I'm trying to communicate on port 53 (doman/DNS) from my DMZ to the inside interface. I's just not working. I've even been on the phone with cisco and he can't get it to work.Right now I'm trying to verify two things.1. When i do a packet trace, it s...

Hello,I just got a refurbished ASA 5505.It works fine until un need to reload it or unplug it from power en replug it, when I do this and it's warm (even after some minutes of uses, so still physicaly cold while touching it), in this case, it simply ...

What would be the command to clear the df-bit on a PIX-515e running 6.3? I have tried the following:conf tcrypto ipsec df-bit clear-df inside and it doesn't take it.Any help would be appreciated.

Hi Dudes,I am getting the below logs in my firewall, Can any one explain me why iam getting this and how to stop it.logs : %ASA-2-106020: Deny IP teardrop fragment (size = number, offset = number) from 12.64.100.1 to 143.66.122.44Message id : 106020A...

Hi all,Can somebody please tell me if i can import an ASA 5550 8.2(5) in CSM version 3.3.1?Thank you!

I have a simple access-list configured on the outside of an ASAaccess-list outside_in permit tcp any host x.x.x.x eq 80access-list outside_in permit tcp any host x.x.x.x eq 443access-list outside_in deny ip any anyCould someone please post a sample c...

I am trying to setup an active/standby failover with 5520's running 8.4(2) and am having problems with it not dropping connections during the failover. I am using a portchannel from the switch to each ASA and using sub-interfaces off that. I'm using ...