Please provide me new location of signature download from cisco site for Cisco IPS.Also please let me know the procedure to update the signatures via IDM. Thanks
Below is the interesting part of my config. I have static NAT configured and working inbound for the Exchange Server and the Barracuda, however outbound traffic from those hosts comes out as the interface IP. Thoughts? I've tried a number of thing...
I am using a Pix 515 with IOS 8.0(3).I have in my access list on the outside interface...........access-list outside_access_in extended permit icmp any 12.23.34.0 255.255.255.0 echo access-list outside_access_in extended permit icmp any 12.23.34.0 25...
Hi,I have 2 asa 5520 firewalls including and 1 AIP-SSM-10 module in each of them. the configuration is set using active/active failover and context mode.Both of them run individualy the IPS module. The IPS is configured using inline mode and fail-ope...
Hello experts,I am trying to filter some outbound traffic but becoming confused!If I have a network on the DMZ interface, eg 192.168.1.0/24, by default the implicit rules allow all traffic on this network to the outside interface but deny access t...
hi all ,I'm planning connect VPN concentrator in our company to PIX515 DMZ interface.At the moment , VPN concentrator(used for remote access VPN for laptop users) is connected directly to core switch so as PIx515. Having VPN Concentrator connected d...
Hi, I have configured the ASA to inspect ICMP but when trying to ping from DMZ to outside I don't get any echo replies.Here is the config.policy-map global_policy class inspection_default inspect icmpnat (DMZ,outside) source dynamic DMZ-Subnet DMZ-...
How do I get the Pre-Shared Key in Plain text rather than in XXXXX form when I take backup and what is the best tool available to take the backup of my ASA boxes.
Hello all, Something that puzzles us.Normal situation:LAN > Router > Firewall > Internet.The firewall has a default route straight to the provider router, all is well.Failover situation:The firewall detects that the primary provider network is down u...
Hi, I'm trying to help a small non profit company with an issue they are having.They have an old cisco pix 501 firewall. I can access it via the device manager interface from my browser.What they want is to be able to get all the traffic from th...
Hello Dears,When i apply this command icmp deny any outside it is blocking everything from outside even though tcp and udp why ???,I have a permit access-list for my DMZ servers on TCP and UDP but they are blocked once i apply the icmp deny any out...
We currently use a /24 provided by our partner and have about 150 static nat's in this range. I recently received a /23 from ARIN so that we could begin multi-homing our traffic. This past weekend I was able to reconfigure our 7604 BGP configuratio...
