Network Security

Hi,Is that FWSM support for Source NAT??If so, can anybody tell me how to do that?our requirement as follows.We have statically NAT 192.168.1.1 to 220........public IP.When a packet comes from outside the original source (public IP) shows to the dest...

What is the diffrence between ASA transparent and routed mode ?

Do any of the ASAs support stateful failover of site-2-site tunnels?  If so does it require  Active/Active or Active/Standby?Any particular model or code required?Thanks.

Hi,I just started reading the documentation for the AD Agent. I'm getting the impression there is overlap/duplication with setting up remote access VPN authentiction to Active Directory via aaa and ldap. Can anyone who has already done this tell me i...

HiOn the FWSM I am trying to register a cert with a CA with an IP Address AND hostname, I can register fine using either an IP address or DNS hostname, but can't do both,ciscoasa(config-ca-trustpoint)# fqdn test,1.1.1.1ERROR: Invalid domain name spec...

Hi,Sudenly after Upgrade our IDSM-2 in the Realeses Tab the signature are not been updated but the IDS it self is up to date.Generaly the IDS is update but I can't see the last aplied signatures on IPS>sig>releases...Who has the solution?Regards,Sent...

Good morning.A recently added outbound rule has left my SMTP communications broken. I have since removed the rule, and had Cisco do some damage control, but it's still dropping some of the SMTP traffic. I get a number of NDR messages each day like th...

Hi all,I was hoping someone could help me with this problem, I have a pair of ASAs in multiple context mode and in a failover configuration, the contexts share a "internet" interface which they use to go outside the world and also in the case one nat...

A few weeks ago, I replaced a PIX 515E with a pair of ASA 5520's.    We have a few basic web applications behind the ASA's.   Nothing complex;  just port 80/443 traffic.    During the swap, we basically just copied the config from the PIX to the ASA....

Hi,With the firewall services module, Is it possible with the base number of contexts  (Admin plus two other) to have these  three contexts each with 8 pairs of bridge group interfaces ?  Or would it be necessary to order additional context licenses ...

When the requirement does not explicitly mention "fair queue", should we enable fair-queue in class-default? I understand it is probably better practice by having fair-queue enabled but I'd like to know the cons and side effects it may have. Say I ha...