Network Security

We are looking at getting a pair of ASA firewalls (probably 5510s) with IPS modules.  I plan to configure them in active/standby as our throughput needs don't exceed the capacity of a single 5510.  Currently we are running a pair of PIX515(non-E) in ...

Ok, so I ran across this message while trying to TFTP an update to a 5505 ASA. %Error reading tftp://10.10.10.10/asa823-k8.bin (Unauthorized client.)Now at first this was very confusing for me.  I will save you guys the long and drawn out details.  T...

Hi FolksHow to verify on the asa 5510 , the vpn-idle timeout,is running on default setting(30mts)

Under the System area on my FWSM module i run the sh disk: command. At the end I get error message "File Allocation Table might be corrupted, Recommend running fsck dsik:Has anyone run this command on a FWSM Module. can it be run during normal operat...

Dear all ,We have got site to site VPN configured between local site with PIX515 6.3(5) and remote site with ASA 5505 7.2(4) . Because of very unreliable internet connection in remote site , we have added new ISP link  which we want to use as redunda...

i have download plug in from http://properjavardp.sourgeforce.netwhile impoting to ASA5510 it giving error(both ASDM adn TFTP). pl help

Hi FolksI Used the the packet tracer command line interface, i have seen the below line,what is mean?Drop-reason: (sp-security-failed) Slowpath security checks failed

Cisco Adaptive Security Appliance Software Version 8.3(2)Device Manager Version 6.3(4)Hello all, I've tried umteen variations to get this working and can't get the active data (port) channel to work. Here's the deal....Coming in my external interface...

Hello,Can an ASA allow or deny Internet access based on MAC addresses of the hosts in a standalone fashion? Without ACS or any other server or software.  I am pretty sure it is a better practice to to MAC authentication on the switches but this is th...

Hi All,I currently have two 5540's in an Active/Standby pair. The primary unit failed on February 12th, so the secondary ASA is now the active one. My question is this - we have made a lot of changes since February 12th and I am planning on fixing th...

Hi,I am looking for some documentation about the pros and cons about using single interface vs. two interfaces when configuring stateful failover. I know it is always best to keep the LAN-based failover and stateful failover data streams on separate ...

Hi all,My question is it possible to convert the any two ports of  asa5520 as L2 ports . If so kindly let me know how that should be done. We are planning to connect our hsrp switches to these switch ports instead of using a separate switch thats why...

Hello everyone, I would like to setup backup ISP in our ASA5510.   Right now the the firewall has for defualt gateway following command: "route outside 0.0.0.0 0.0.0.0 114.324.321.33 1"  i am changing this to route outside 0.0.0.0 0.0.0.0 114.324.321...