Network Security

I've setup many IPSECs on previous ASA and PIXs but I have a problem with 8.3I've used the setup wizzard and created a IPSEC rules etc and the tunnel comes up but I've noticed the way NAT excemption has changed.  I can see the two rules added by the ...

Hello experts,I have (I think) a relatively simple internet and site-to-site VPN configuration in place.  The config is meant to be very secure with only individual certain IP's, protocols etc.allowed through.  I don't mind using the same firewall ru...

Hi,Does ASA 5500 has stateless filter to drop packet even when 3-way handshake is finishedFor example,1: 3-way handshake is done2:client send data to server3:I apply a statless filter to the incoming interface to drop the packet from the clientThanks

Is it possible to setup an IPS sensor's IDM console or CLI to check ACS for user authentication rather than use local accounts on the sensor? Or is this something only the cisco works software can do?thank you, Bill

Hi allI have some NAT/access rules problem.static (inside,outside) 210.90.112.221 192.168.222.4 netmask 255.255.255.255 access-list outside_access_in extended permit tcp any host 219.90.119.237 eq 3389 access-group outside_access_in in interface outs...

When i log into the firewall i see the configuration is last modified, Even though i don't change any configuration on the Firewall.Please let me know if any one is aware of this why it happens.Thanks in advance.

I have opened up the access list, added the static route  inside,outside statement, not sure what to do on NAT.  ASA is running ASA Version 8.0(4)32 Any helpful suggestions would be appreciated.

Hi,Need your help on this guys.We currently have two ASA 5510 firewalls in two locations. One in each and they don't have a standby pair. Now, I wanted to put them together in one site and replace the other one with ASA5520. Now my question is, I nee...

Hi Guys,I have 3 networks coming on DMZ (VPN) interface. Only one network is able to ping the DMZ interface. See below networks coming i on the DMZ.10.132.24.0/2410.132.25.0/2410.132.26.0/24Only the 10.132.26.0/24 netork works as it is in the same ra...

We have a need to capture bw and utilization of a vlan interface on fwsm. Any suggestions on how to achieve this?

     Hi all!I'm having these message in firewall:[ Scanning] drop rate-1 exceeded. Current burst rate is 10 per second, max configured rate is 10; Current average rate is 16 per second, max configured rate is 5; Cumulative total count is 10198I'd lik...

Hi Guys,I want to connect the IPS appliance inline between the outside interface vlan (which located on the switch) and the Inside interface vlan which located on the firewall module, how can i do that? any solution for that?Regards,Rami