Network Security

Resolved! Packet Capture from Hell

ForumI am working at a client site today where we are using some packet captures on the clients ASA to perform some problem resolution.When I perform a "sho capture" on the ASA, I have this output:ODEC-ASA# sho capturecapture X type raw-data interfac...

mpls vpn with asa 5505

hi all,i got one mpls ip-vpn line from our isp . it is working good i can communicate my other offices.but now the problem is i want to register some avaya phones in the branch office.but my avaya server is located in headoffice.i can able to ping my...

upgrade license

Hi everyone,I want to confirm if the upgrade license (ASA5505-SW-10-UL=) is backward compactible with PIX 501 firewall device?though pix 501is end of life bit i want to verify if the upgrade license for asa5505 will work with it?thanks..brsam

URL Blocking through ASA 5510 without ISA

Hi,I have cisco ASA 5510 with ios version 7.07 & all users are browsing the internet via PAT through ASA. i want to block some sites/URLs like facebook, yahoo etc.please help us that how to do it without ISA.

New ASA 5505, can't ping inside interface.

Hello,I have a new ASA 5505 and all is working fine, I can CLI and ASDM into it, but just can't ping the inside interface, do I need to enable a feature to make this work somehow?Thanks

Resolved! FWSM not to inspect certain host

Hi,We have a FWSM running on multiple context on our network, and recently we found from ' sh service-policy' the FWSM is dropping some of our xdmcp packet.Inspect: xdmcp, packet 16208, drop 81, reset-drop 0here is the running configuration for the s...

WS-SVC-FWM-1-K9 doesn't boot

Hi everyone, I'm having an issue, with an WS-SVC-FWM-1-K9. The card doesn't boot properly, it tries to boot, but after a while the 6500 puts it in shutdown. I've noticed that it has 2 RJ45 ports in the board, I've plugged my console cable, but i o...

5540 Management Interface IP addressing issue

How does one allow /31 mask for an management interface on an ASA5540 using version 8.3(1)?I need to configure a 192.168.x.y /31 on the management 0/0 interface of a ASA5540 and it is providing me with the following error:ERROR: /31 mask is not allow...

FWSM Help

All, I am new to using a FWSM. I am familiar with the PIX and ASA's. We have two Cisco 6509's with a FWSM installed in both. Our network is shown in the diagram. We use Blue Coat Packetshapers and Barracuda Proxy appliances. I plan on setting u...

Cisco ASA Lost SSH to Active on Failover

Hello,I am having a curious problem with two Cisco ASA 5550. They are configured in Active/Standby failover and in routed mode.The problem is: I cannot connect via SSH to the ACTIVE unit, only to the STANDBY. If a switchover is forced the problem is ...

Inherited PIX 515 w/ ver. 6.2

I have inherited a network for non-profit with limited funds. Everything goes fine except intermittingly the PIX cuts off internet accesse (1-3 times a week). With my lack of knowledge/experience of PIX I have been simply powering down the PIX and t...

syslog server setup Pix 6.2

I need to setup a syslog server for PIX w/ 6.2 and was hoping to get detailed instruction how to go about it. I would like exact syntax w/ an example on the pix and any configuration on the computer that will be receiving the log info. I have downlo...

PCI compliance scanner "blocked" by ASA 5510. How do I "whitelist" without giving access to all ports?

We use SecurityMetrics as our vendor for PCI compliance scanning. Of all our servers, only the video server fails their scan, and this is their result:"This scan is inconclusive. Though your server had open ports, we were unable to connect to any of...