Network Security

Hi Everyone,We  are currently connected to a single ISP with different Internet related  services like mail, web, dns and IPSEC site to site VPN's running. We  would be adding another ISP and do load balancing across these multiple  links. We are usi...

I need to be able to report on a count of Accepted and Dropped connections due to policy on the Outside interface on a monthly basis. The outside interface is ifIndex.3 . Support gave me the below OID, but I'm not convinced its correct. I also cant s...

Hi,I have this error when I try to migrate a policy NAT from 8.2 to 8.4:Addresses overlap with existing localpool rangeERROR: NAT Policy is not downloadedThe original 8.2 configuration works and I created a static NAT for an INSIDE_HOST (with EXT_HOS...

Hi,We recently deployed FWSM in our Data center & moved different VLANs behind the different zone.For some zones we got the policy from the server administrator & we restricted that zone based on that but for some zone we couldn't able to get any pol...

I have quite a few businesses/schools in my area that seem to be using some sort of CISCO AP equipment.I'm not quite sure the model but I know when you connect, you get redirected to 1.1.1.1 and have to either hit accept or fill in your email and the...

Hi,I am trying to restore a IPS configuration after a re-image with the same version.Model: AIP-SSM-10I get the following error:Error: Invalid configuration: 'Error: /enabled/password/ -- the value is empty and has no defaultExample:sensor# copy ftp:...

I have a faulty ASA5520 and I am not sure if I have a SMARTnet contract for it or not (I manage over 200+ ASAs)The problem is that the Serial Number sticker that is normally on the back of the ASA is missingThe ASA5520 is also faulty and doesnt power...

I was just curious if there are any performance benefits of using multiple network objects on multiple rules vs consolidating them into fewer rules by grouping them?  For example, I have about 10 lines of NAT exempt rules from the same source to mult...

I'm looking at upgrading our T1 to a 10 mbps EoC connection.  Currently we have a 506 PIX.  What ASA model would be a good replacement.  We are a medium size manufacturing company currently with 80 workstations accessing the internet. 

I have an ASA 5505 in transparent mode. The device mac address table is always empty.  show mac-address-table and show mac-learn both come with empty response.any idea?thanks,Han

Quick question. I have a site - site tunnel that is up and running between a Pix 515E and a 3050 appliance.Tunnel is up and running but on the pix side I dont see traffic from a couple of subnets behind the inside interface.On the vpnallow access lis...