Network Security

Hej Everyone!I configured an ASA 5505 a couple of weeks ago. Every thing is working properly except it sends irritating messages to the syslog server. Her is an example of the message:      %ASA-2-106001: Inbound TCP connection denied from 195.215.22...

Hi, We are getting quite a lot of these alerts and I can't find any info. on the internet.  Can anyone shed any light on it..  There are hundreds of these alerts and most of the time the IP adresses are different.  As far as I can see most of the tim...

Hello all,I am trying to configure Zone Based Firewall (IOS 15.2T) on Cisco 881 router for IPv6. Current setup is simple:Zone:LAN --> WANzone security LANzone security WAN!class-map type inspect match-any Internet-cmapmatch protocol dnsmatch protocol...

Hi Forumers'is anyone can explain what this log message mean?[ Scanning] drop rate-2 exceeded. Current burst rate is 1 per second, max configured rate is 8; Current average rate is 16 per second, max configured rate is 4; Cumulative total count is 58...

Hello,I'm working on a WCCP issue with TAC and the TAC engineer told me that WCCP redirect only works if the redirected traffic (the permit ACL), the web-cache server, and the redirect interface are all on the same subnet.  After looking into this it...

I have an ASA 5510 with an IPSEC VPN configuration. Clients are using the built-in Windows VPN client rather than the Cisco VPN client. There is a single LAN connection from the 5510 to our 6510 core switch. On the core switch are multiple subnets in...

I will be installing a new ASA 5510 firewall on our SIP vlan to separate our voice traffic from the rest of the traffic.  I'm trying to decide whether or not I should go with an active/active setup or an active/standby.  Any insight on the best way t...

Hello, I have a 3845 router (12.4(13r)T10) with ZBF. On my LAN there is a user who need to access a remote IPSEC VPN server. He is able to get the tunnel but afterwards he cannot connect to any service in the remote LAN. As I'm using zbf I think that...

Hi All,I recently inherited a Cisco 2911, that appears to have had Firewall rules imported into Externally Defined Rules. ACL's are currently allowing/disallowing traffic. However, there are no firewall rules configured. To meet compliance we need to...

Hello,I wanted to rate-limit download traffic passing through my ASA5520, Software Version 8.2(1). I used configuration based on the offical documentation.I tried two configurations, one at a time: "inbound based" where I limit the traffic entering m...

Hi all! I'm fairly new to the "new" way of setting up NAT rules on the the ASA and need a little help getting going. I'm probably overlooking something very simple but I just can't see it for some reason!!!!! Overall I would like to send all of the t...

we are running 8.4(2) on the asa with the below configurationwe basically have a static for .7 on .25 and a nat for .7 for port directionwith manual nat that takes precedense over auto nat within the object group am I correct that I dontneed the dyna...

I've recently turned on Global Correlation but we've failed to update every 5 minutes.PL-ASA-IPS# show stat globalNetwork Participation:   Counters:      Total Connection Attempts = 2      Total Connection Failures = 0      Connection Failures Since ...