Network Security

Hi All,I am trying to remove a line in a particular access-list configured in a FWSM module using this command "no access-list <acl> line 19 x x x x" but it doesn't work. See below:FWSM/xxx03(config)# no access-list ?configure mode commands/options: ...

I'm receiving a lot of these messages from the standby ASA since I upgrade the ASA cluster from 8.3(2). I see that I have some diferences in the xlat table. How can I get rid of these messages? Thanks.

I have 5 static public IP addresses at my disposal. A checkpoint firewall with VPN access provides remote access for mobile users. How would I go about integrating the ASA 5505 SSL VPN into this network so some mobile users could continue using the c...

i am deploying NAC as layer 3 OOB Real IP Gateway using ACL. i have a problem that Agent doesn't try to communicate with CAS untrusted interfacei enabled logging on the Switch and i found that NAC agent sends udp requests to its default gw (interface...

Hi All,Currently MTU size on the outside interface is 1500.If i change it to  1450  does it have any impact.we have site to site ipsec vpn.Between router and firewall we have bluecoat packet shaper. on that packet we have allocated 2mbps bandwidth be...

hii have by mistake issued the remove all from rommon & not my ips has no image.My question is, i have another IPS that i wish to copy the image from. I cannot work out how to do this?I dont think copy flash tftp works. The IPS is a 4240, i do have a...

What's the best way to bypass inspection of traffic to port 443 in IPS configuration? I don't want to use Event Action Filter because that will actually still use the inspection engine and match signatures and just exclude actions. I need inpsection ...

Hi,Hopeing someone can point me in the right direction, I have a ASA 5505 which is connected to a remote site which also has a ASA 5505 over a L2L VPN tunel. One of the sites has a WAN failover configured with two ISP which is working successfully. B...

Hello everyone,There's a lot of public and simple tool to flood attack a host with TCP, UDP packet. These tools can send TCP/UDP packet very fast and quickly bring down weak network devices & servers.We are going to public a website and i'm worry abo...

I have installed a CA signed certificate onto an ASA with ASDMthe exact and full procedure is documented herehttp://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a00809fcf91.shtmlthe problem is that I need to do this via CSM ...

Does anyone know who to convert config form a Juniper Netscreen Firewall to a ASA? We are trying to get rid of the netscreen firewalls at our location and replace them with ASA's. I know very little about Juniper Netscreen Firewalls.

Hello,I want to change my internal ip of my pix 515 firewall - i want to change it from 192.168.1.250 to 192.168.100.250 - does anyone know what simple command i would need?I am vlanning my network so want to put my pix into vlan 100.thank you