Network Security

HelloMy config:ip inspect name CBAC tcp timeout 10ip inspect max-incomplete high 100int fa0/1ip access_group permit_all inint fa 0/2ip access_group permit_all inip inspect CBAC inAccess-list on both interfaces accept all ip traffic.What happens when:...

Hi, I am trying to allow SIP communication through our Cisco ASA firewall but I get the following error in the logs. It's almost like looping with these two error message. I have removed Inspect SIP from the global policy map and configured it under ...

Hello,We can´t reach DMZ servers from other DMZ servers. It's very strange.If I make a ping from DMZ server to another, sometimes only recieve one ping, sometimes 4, sometimes 0.How can I allow the traffic between DMZ servers??(ASA 5520 Version 8.4)R...

Hi All,I have installed ASA5505 in the network. Port forwarding has been done for one of the server in our LAN. Public users are able to access the server successfully. I am trying to access from inside using the same Public server IP, but unable to ...

Recently upgraded a 5510 to Anyconnect Essentials and Anyconnect Mobile, the device was Security Plus and is now Base. Is it supposed to work this way? I lost my Gigabit interfaces. Is it possible to have Security Plus + Anyconnect Essentials?

Hello guys,I am in a middle of a dessign problem. We have 2 ISP, and we have a FWSM running multiple contexts, my context that is receiving all the static translations for all my published servers is the one where i want to configure default gateway ...

I'm trying to get a new 5505 installed in our network to replace the 1841 that died over the past few days (memory issues).  One of the big pieces of functionality that the old router gave us was the ability to open certain ports to the outside world...

Hello All,I am having an issue do DHCP from the 6500, and was hoping someone cant help. So, I tried to setup DHCP from the FWSM to the clients and this worked fine with giving out the IP, however the gateway for devices on the inside is supposed to b...

Hi, we have a FWSM (4.1(5)) configured with several contexts. Last day we had a broadcast storm in one VLAN connected to one FWSM context and all contexts were impacted with loss of service. We could check that CPU in impacted context went to 50 - 60...

Hi All,Please I need your help.Yesterday I discovered the primary and secondary CAS were both in active state and reporting their fellow peer as dead (I did this using ./fostate.sh), causing authentication errors on the network. I had to stop the per...

Hi all,I'm looking for a 'new' solution wich i can't figure out...Info:First of all, I use a Cisco Asa 5505 with ASDM 6.1.And we own from our ISP a public router IP with 5 useable public sub-IPs.(IPs are just made up...)Asa Router : z.z.80.21ISP Gate...

hello sir,with regarding to the firewall ASA5520, i'm using it in my network, all the confiuration are properly configured and working but with the use of proxy address in internet explorer(e.:206.53.155.129/3128) all the blocked contents as easily a...

Hello all,I have a working easyvpn setup.  We need to change the HQ ip address (current it is i.e 85.146.110.101).  This is ACL is applied to Fastethenet conecting to ISP:interface FastEthernet4description $FW_OUTSIDE$$ETH-WAN$ip address dhcpip acces...