Network Security

Hi guys.Need little help here with Failover, i have configured Failover Active/Standby and it was running few months but now its not working. and when i try to debug it its giving me these messages.vpnfol_thread_timer: HA MSG: no Buffer available for...

Hello, I am using ASA 5505  as a transparent firewall. I  have assigned ethernet 0/0 as outside interface and ethernet0/1-7 as  inside interface. There are 3 departments in office. So, i connected  ethernet 0/1 to Dept A, ethernet 0/2 to Dept B and ...

Ok, I am at a loss on configuring a new ASA5505 for multiple static port translations.I would have expected to simply add several service command to a network object to complete the task, however, the service command overrides the previous and replac...

Hi AllI want to setup my FWSM so that the outside networks can communicate with the inside networks on their real ip address and visa versa. This is not an Internet facing Firewall and only being used to filter traffic between some secure networks, a...

Hi allCan threat detection provoque frequent disconnections on allowed traffic?We are using  asa 5520 with 8.3.1 IOSFor instance in ASDM we see SYN attack messages .The source ip address correspond to external an external host (in the outside interfa...

Good Evening Everyone,Got an ACL issue on my 5510. I have set up ACL's for the Inside and Outside interface. Both ACL's are identical right now as I am trying to test an issue. When I run the packet trace command in ASDM I am able to successfully pas...

Hello,Could somebody confirm if Netflow version 9 is available on any version of the Cisco Firewall Services Module please?  We have four of these devices that are managed by a vendor and I am told the current version which is 4.0(12) doesn't support...

Hi Guys,I am new to IPS and would like to enhance the security of the Cisco 887s we have, they all have Adv IP Services with IOS 15.0 M7What is required to enable IPS, such as products or licences? (Product Codes would be helpful)What is a basic conf...

Dear All,As i'm facing the issue with Cisco CSC module installed on ASA 5510, It hangs up and doesnt work sometime, so it is bypassing all the traffic without inspection through CSC module. After restarting ASA 5510 box, it works fine as it used to w...

I remember quite some time ago hearing that spam mail on an infected internal system can use any port to send mail out.  What I would like to setup is a set of firewall rules to only allow certain packets out through their correct ports, such as DNS ...

Hello All,Gurus,out there please help me understand how do i update the SSL certificate on cisco NAC appliance (clean access mananger/clean access server).how to check when is the certificate being expired.thanks in advance.

Hi,We have a ips 4270 which reports a lot of threats with source and dest 0.0.0.0. Why is that, can't it solve these addresses? Example:Receive Time          Severity          Event Type ID          Event Name          Device          Source         ...