Network Security

Hi,is there any possibillity to generate a syslog message, if a time based acl ends ?example config:time-range T_Apr27 absolute end 23:59 27 April 2011!access-list NAME extended permit tcp host x.x.x.x host y.y.y.y eq 1500 time-range T_Apr27the rule ...

I need to use HTTP inspection to block certain URLs, but I need a way to informe users that they requests were blocked.Is there anyway in the ASA to show a "page" saying "your request was blocked"? Or any way to redirect those request to a cative por...

Hi, when I connect to VPN with ASA 5510, can not connect to web applications in http instead https in other applications are working properly. how can I fix this? Thanks

Hi,My customer is having Cisco 4507R switch with IOS version 122.31-SG1 which deosnt supports NAC - L2 IEEE 802.1x but supports NAC - L2 IP.What is the difference between these features and which features is required for proper authentication and pos...

Hi all,every time i try to copy a file on disk0 the asa does an reboot before finish writing file to disk0. I test it with tftp, asdm, ssh and many different files. Always aborting the writing...disk0 255426560 bytes total (172392448 bytes free)Does ...

Hi Forumer'sJust seeking idea on how to design on redundant firewall design1. branch firewall got dual uplink, which normal time is using primary line connect to HQ. If connection to HQ fail, then will swap to secondary link for ensure connection res...

is it possible to introduce a failover firewall without dedicating a interface on each firewall for connecting the two.  we currently have one asa and want to add another one for failover but all interfaces are used, do we have any options? can we do...

ASA-5-305013: Asymmetric NAT rules matched for forward and reverse flows; Connection for icmp src outside:192.168.13.50 dst DMZ2:192.168.13.15 (type 8, code 0) denied due to NAT reverse path failureCant seem to get around this one yet. I have a remot...

I just upgraded my cisco asa 5510 from 8.2.1 to 8.4.1. Now my VPN is no longer working. I can connect to it but can connect to anything from there. The heard the asa creates a log from the upgrade to show me what part of the config doesn't carry over...

I updated my ASA 5510 SSM modules this morning to 7.0.(4)E4. Ever since then both my primary and failover unit has been showing  at what I am guessing is 100% processor utilization.Primary:Memory Usage   usedBytes = 663646208   freeBytes = 368848896 ...

Can anyone tell me where or not the NM-IPS-K9 on a 3800 series router runs SNMP and if it does what version of SNMP?  I am currently running sensor OS 7.0(2)E4.  I would also like to know how you find that information on the module itself.

I have a pix 515 with 3 interfaces running pix software 7.1(1)e0 outside 3ffe:xxxx::101/64e1 frontporch 3ffe:xxxx:1:101/64e2 inside 3ffe:xxxx:2:101/64All interfaces have ipv6 enabled and neighbor discovery disabled and router advertisment is suppress...