Network Security

Hi FolksI Used the the packet tracer command line interface, i have seen the below line,what is mean?Drop-reason: (sp-security-failed) Slowpath security checks failed

Cisco Adaptive Security Appliance Software Version 8.3(2)Device Manager Version 6.3(4)Hello all, I've tried umteen variations to get this working and can't get the active data (port) channel to work. Here's the deal....Coming in my external interface...

Hello,Can an ASA allow or deny Internet access based on MAC addresses of the hosts in a standalone fashion? Without ACS or any other server or software.  I am pretty sure it is a better practice to to MAC authentication on the switches but this is th...

Hi All,I currently have two 5540's in an Active/Standby pair. The primary unit failed on February 12th, so the secondary ASA is now the active one. My question is this - we have made a lot of changes since February 12th and I am planning on fixing th...

Hi,I am looking for some documentation about the pros and cons about using single interface vs. two interfaces when configuring stateful failover. I know it is always best to keep the LAN-based failover and stateful failover data streams on separate ...

Hi all,My question is it possible to convert the any two ports of  asa5520 as L2 ports . If so kindly let me know how that should be done. We are planning to connect our hsrp switches to these switch ports instead of using a separate switch thats why...

Hello everyone, I would like to setup backup ISP in our ASA5510.   Right now the the firewall has for defualt gateway following command: "route outside 0.0.0.0 0.0.0.0 114.324.321.33 1"  i am changing this to route outside 0.0.0.0 0.0.0.0 114.324.321...

HiHow can I configure policy NAT on ASA5510. I would like to do the following;www.example.com               9.1.1.9     NAT to      10.1.1.9If source IP =     1.1.1.1then NAT to     =      10.2.2.9the rest NAT to = 10.1.1.9Can someone please help to ...

Customer purchased websense content gateway which is dependent on wccp. But from I can see the only configuration the ASA supports WCCPwise is that all clients and the wccp server have to be directly on the same subnet that that ASA is on. Is that st...

alright folks,i guess i'm just being dense here, but i'm trying to find the command that shows me the memory utilization presently in use for the access rules.i know that np acl-notificattion toggles the prompt on and off, but i'd like to merely view...

Hello Experts,On my Pix515E ASDM console I quite often see large surges in the total number of connections. I would like to find a convenient way to see what (or who) is causing this.The command Show Local gives the answers but it returns details of ...

Hello,I am working on an integration where we need to change the IP address inside of the application layer presented to the client through a NAT session. Basically the setup is as follows:1. Client connects to web server NAT2. Web Server presents HT...

I have a pair of Pix515 firewall running version 8.0(4) in Active/Standby and "stateful" failover.  Everything seems to be working fine.  I have a Apache web server running on Linux sitting behind the firewall and I  the firewall NAT rule as:CiscoPix...