Network Security

HiAS discussed earlier ping to inside interface drops  after some intervals.When checked logs in asa built 10.1..x.x  123  65.55.21.22 123 build outbound udp connection 12345 for outside:65.55.21.22 to inside 10.1.x.x /123 for everyhour we are recevi...

Hi,I have a problem with an IPS 4240 cpu utilization. The cpu is reaching 100% and the traffic is being dropped. The IPS has been updated to the latest release 7.0.6 with latest signature update but the problem persisted.I found out that there is a s...

Hi, I need to import a trusted wildcard certificate to AIP-SSM-10 and 20.  I have looked via the IDM and can not see any certificate options, other than generate new.  Does anyone know if this is possible and if so how it is done. I also need to amen...

Hi,I have a couple of questions I hope people could answer:1) What recommendations/options are available for downloading signature files to a HTTP/TFTP server prior to having the IOS IPS device pull them from the server?  Is their a way to automate t...

according to this document I do port translation through CLI and I have following config: ciscoasa# show run access-listaccess-list local standard permit anyaccess-list outside_access_in extended permit tcp any object http-155ciscoasa# show run acces...

Hello,Is it possible to monitor the FWSM NP stats to get output show in "show np blocks" and "show np 3 stats"?Thanks,Lehi

Hi All,I have router and inside interface is connected to firewall.Last week i had attack one of my internal server  and i also loosing connectivity to inside interface of the firewall.But today suddenly internet was down when checked link was up but...

Hi,I want to know that, like Cisco IOS Router, Does Cisco ASA pass the UDP Broadcast traffic e.g., TFTP etc...?Any thoughts ???BR,Mubasher Sultan

I Got This so much log forn my cisco asaDeny UDP reverse path check from 172.16.38.114 to 192.168.2.1 on interface outside172.16.38.114 is in my inside interface192.168.2.1 <-- i dont know where, not in my enterprise LANwhat cause this log ?how to ov...

Hello.as I studied,  Interface ACLs and Zone based Firewall should not be applied at the same time. This it means that every packet is processed by the router (I'm thinking NAT).For example, an unwanted traffic is processed by NAT before is it drop b...

We had a situation where we would get two xlate entries on an FWSM for the same public IP resulting in occasional looping of traffic.  For example:static nat entry for <private IP B on inside interface> to <public IP A on outside interface>xlate entr...