I'm being asked (by an auditor) to provide "system-generated evidence of password frequency requirements being enforced" on the 4240 IPS sensors. Any suggestions?
Hi Team,im having pix 515 with os 708 & asdm 508 versions. assume i have few lines similar to the below.. I have installed the asdm for the first time and i am getting the errors as attached here...asdm group abcasdm group defasdm group ghinow i am u...
Hi,I have a firewall which is conntect to a Cisco 870 router. The router only allows one ip address to ssh into and it which is 7.7.7.7 but the interface which is connected to the router is on the firewall is a 2.2.2.2 and the router interface is a 2...
We have a large network with a bunch of partners in an MPLS cloud. All networks are behind an ASA. We use nat (inside) 0 0.0.0.0 0.0.0.0 because we perform nat translation at another point on the network.This particular subnet has a new ranges behind...
I have a pair of asa5520's in active/standby configuration. I plan on ugrading the asa/asdm images to 8.4 shortly (currently on 8.0) and would like to do this with zero downtime. Specifically, I would like to upload the new software to the standby ...
Can somebody please confirm if the 5510's support active/active ha. There is conflicting info. on the datasheet stating otherwise.http://www.cisco.com/en/US/prod/collateral/vpndevc/ps6032/ps6094/ps6120/product_data_sheet0900aecd802930c5.htmlAs busine...
A very good tool for feature checking is Cisco Feature Navigator however it doesnt have ASA features . I am trying to check if ASA 5510 BASE supports IP SLA or not . Where can i find that
Hi there, I am new with ZFW and I would appreciate any hints for my network design ;-)I am trying to do the following: at the moment, I have a router with about 9 VLANs containing workstation-VLAN, printer-VLAN, notebook-VLAN, testlab-VLAN etc etc......
I have an ASA 5510 running version 7.0. I have a problem with an exchange server using a static map and its outbounc connectivity. It connects outbound through the global address even though inbound connectivity works fine through the static mapping....
Dear, we have PIX-525, below show version, wenever I am opening using the browser I am getting certificate ERROR and massege " Laoding PIX devise manager. Please wait.." an d I keep waiting for long time but it didnt open. anyone can helpThanksPIX-52...
I need to get all base ACLs that have a hit count of 0. The problem is that I have object-groups in my acl that get broken down. The problem is that I need the base rule and not 1500 subrules under that. Is there a way that I can get that from the cl...
Hi,we are having a firewall asa 5520 .we have connected the management port and inside port to internal network and dmz port to dmz network.now we need to configure tacacs and other management tool on dmz devices through management port. The problem...
Hi all,I am currently writing up the procedure for doing this upgrade on our current firewalls (active/standby failover pair) and wanted to confirm a few things.1 We are upgrading from 8.2(2) to 8.4(2) so need to run "no names" and "no nat-contro...
hi,can someone please tell me what the user specification with the asa5505 means.there is a 50 user and an unlimited license with the asa5505. with 50 user does this mean that only 50 user can work simultaneously over the asa, or what?thanks,florian
HelloCisco documentation is unclear:if i have two members in redundant interface both connected to the same switch/vlan, on switch both ports are UP (no shut),what is a state of physical interfaces on ASA ?Are both ports UP ? Or ASA shutdown one of t...
