Network Security

Hello All,We are planning to convert our 6509 chasis' into a VSS.Each chasis house an FWSM.The chasis are running the following IOS- Release 12.2(33)SXH8b and FWSM are at 3.2(Application software)We understand that the FWSM need to be upgraded but ar...

I inherited a network redesign project mid implementation and ran across an issue that I was not 100% sure able to be resolved.  Implementation is occurring in which the organization is changing over to a different ISP and we have some customers that...

GuysI am facing high cpu util  issue   80% in pix 515E with IOS 7.2(4).When a syslog is enable for informational/warnings level traps the util goes to 80% where as other wise it is observed to be 36-37%.When i changed the trap level to alert the util...

Hi,I've read through the documents on Cisco.com about this matter but still felt I need to confirm that I understood the thing correctly.So basicly the situation is the following.I'm using a lab ASA 5510 Failover pair in Active/Active mode running 8....

I want to lock down my router that connects to the cable modem. Now, I thought it would be simple to just block everything incoming via an ACL, but as soon as I applied the below ACL, even the clients that are being NAT'd couldn't get to the internet...

I work exclusively from the command line. I have been trying to understand the configuration rules for 8.3 and above nat and could really use some assitance....Here is a sample prior to 8.3:global (outside) 2 192.168.2.3 netmask 255.255.255.255nat (i...

Hi, I was recently given the responsibility of our company's firewall. Even though our firewall is managed by a vendor, I want to understand the whole concept behind so feel free to provide as much feedback as you can. I have some knowledge about NA...

Hello,In order to meet our requirements we had to configure PAT for TCP 80 on 2 external IP addresses to one internal IP in DMZ. TCP port 80 is being translated for both external IP addresses and it works as expected. However, since we have migrated ...

Hi, could you tell me if it is possible to change the primary unit to secondary and secondary unit be the primary, only by appliyng the command: ..."failover lan unit primary " on the secondary ASA???Regards!