Network Security

Hi All,I'm trying to work out if there is an equalivent FWSM command to the IOS 'ip inspect log drop-pkt' command?IOS command I'm talking about for reference.http://www.cisco.com/en/US/docs/ios/security/command/reference/sec_i2.html#wp1048887Cheers!R...

hi expertsi have a question for the following outside nat statement when the user is coming from outside of the ASA and requires to go to inside destinationis the below nat at all possible ? i.e nat exempt with outside .if yes , then in what circumst...

I have a ASA 5510 with version 8.3this ASA have no any NAT need te be configuredIn version 8.3Could someone please tell me do I need "no nat-control" or by pass nat in order to get the traffic passed?if yessince nat-control is no longer exist in vers...

Hi all,Please advise me about asa5510 feature,capabilities.My question/problem :My ISP provides 2 internet connection (1. 8mbps; 2. 2mbps) and his router change the paths if one goes down.But if the second with 2 mbps is in use it is not enough for a...

hi expertsi am confused as to whether i need to specify a real ip or a mapped ip in the acl in policy nat . in this scenario destinationIP is also getting translated .currently iam using a mapped ip and not able to reach the destination . will static...

Hi there,we have the following setup:ASA--VPN--> vendorThe vendor is only allowing access from 192.168.10.10 so we are nating our internal network to 192.168.10.10 and that is how we access the vendor's network over the ipsec vpn tunnel (ie. the sour...

Hello Experts,I am using a Pix515E with 8.0(3) and 128MB RAM. It ran OK for months but has recently had several episodes during which it produced streams of memory allocation failures (syslog 211001). When in this condition I could not log into the V...

we have a number of dynamic vpns and we need to be able to access them from remote acess vpn (ipsec), problem is that given the remote sites are on Dvpn the SA's constantly gets lost if there's no traffic.  So we want to create a script that will sen...

/* Style Definitions */ table.MsoNormalTable {mso-style-name:"Table Normal"; mso-tstyle-rowband-size:0; mso-tstyle-colband-size:0; mso-style-noshow:yes; mso-style-priority:99; mso-style-qformat:yes; mso-style-parent:""; mso-padding-alt:0in 5.4pt 0in ...

Got an ASA5520 running V8.2(3) and we want to upgrade our internet bandwidth. Our ISP says OK but we need to install different physical circuit,upgrade CPE router, etc.Then they say, btw your globally allocated IPs will change - this is a problem as ...

My question is, what is the purpose of secondary IP addresses that are configured on interfaces for HA. Other than to manage the secondary unit? Do i need a secondary on every interface? Thanks in advanceEric