Network Security

Hi All,I have created a object group and a access list as given below.object-group network MOBILE_INaccess-list MOBILE extended permit ip object-group MOBILE_IN anystatic (inside,outside) x.x.x.x  access-list MOBILENow my problem is that By this conf...

Hi there,We have a site with 2x 5540 asas with SSM-20 IPS Module in active standby mode.The signatures 1204 and 1208 relating to Fragmented IP datagrams fire on traffic even when excluded from the siganture set.Any ideas why and how to fix this issue...

i have a Cisco ASA 5520 8.4(1) with a ASA 5520 VPN Plus licensei want to use the management interface as a regular interface (using the no management-only command)is this interface a Gig interface as well ?

Hi, a new antivirus software (sophos) has stopped the CSM 3.3.1 sp2 servcies probably and now I have some troubles to restart it again.But for safe procedure, how can I start a manual CSM back-up from CLI ?thanksrs

Hi:I have a question about using static NAT.I want to allow hosts on the inside interface to be able to access hosts in the dmz using their real dmz IP addresses.inside: 10.0.0.1/21security level 100dmz: 172.31.0.1/21security level 25The following co...

We have an ASA5505 were we see errors from time to time on this interface:Internal-Data0/1 I can't seem to find anyting as to what would cause this, or if its a problem.  Anyone have any ideas?  No other interfaces show the issue.Thanks,Jason

What would be the best Cisco device to have in order to fully protect a home network for unauthorized access?  I don't need an all in one device since I already have Cisco routers and switches, just need to solid secuirty device.

Hi, All! Please somebody explain what does it mean? Google shows only four links to the official site and nothing interesting there.

Hi all,I've got a bit of an interesting dilemma that I'm hoping that someone could help with. I have two distinct networks: A "regular" network, along with a "secure" network. I've not been involved in the setup/configuration, but I've been handed so...

I have two nos. of dmz servers and also have two separate public IP for static NATI have configure the following.. but i can't access the internet.asa(conf)#access-list outside_access_in extended permit ip any host 115.119.126.x1asa(conf)#access-list...

Our client tried to a download a real time generated file from a website, the generation process around 5 mins, after 5 mins, the file will be started to downloadWhen my client direct connect to internet, the file can be download successfully, but wh...

Hi, are there any feature limitations arising from using IPSec IKEv2 in AnyConnect? I'm specifically interested in Always-On, & TND. I saw in the release notes that it said there were some limitations but I couldn't find those limitations actually de...