Network Security

I need to remove FWSM from a prodcution 6509.  This FWSM is a standby.  What's the best way to remove without powering down the switch or impacting antyhing?  Someone could please advsie. Thank you

I have a setup on a client site very similiar to the attached diagram.There is a route on the ASA to get to a remote site the other side of the router over MPLS cloud pointing to router.You can ping to the remote site but cannot http to a device at t...

Hi,I'm having issue with doing tftp to device behind the firewall (ASA) even though I have allow tftp from outside. Here is the message I see on the console.ciscoasa/C2(config)# ciscoasa/C2(config)# ciscoasa/C2(config)# %ASA-6-302016: Teardown UDP co...

Hi,I am using ASA5510 and i want to know if it is possible to redirect http traffic to an internal proxy software.I explain :PC from the LAN use a internal proxy in their IE browser but some other PC doesn't use it.They are directy connected to the I...

I have a normal setup of ASA5505 (without security license) connected behind an internet router.From the ASA5505 console I can ping the Internet.However, users behind the Firewall on the internal LAN, cannot ping the Internet even though NATing is co...

Hi,We have an IPS 4240. We do not have any SNMP logging,but there are many Alterts of High siverity and we would like to know all that is of High sivereity. But when we query the event viewer, it shows only for the last 3 days. Does this mean the log...

Hi,We will like to achive HA between two datacentres.Please see an attached topology diagram.Our ASA will be connected through Pair of Nexus, and if the WAN link broke between two datacentres, how will ASA will detect the failure because local link b...

Hello,I recently upgraded my firewalls to 8.2(4), since then we have had an issue connecting to remote hosts vis ssh.  (this upgrade may be a red herring as it didn't effect ssh on another site)the problem is from inside i can start an ssh session to...

Hello,Is there some documentation on what exactly the default esmtp inspect map does? I am unable to find any. I would like to create an own esmtp inspect map but would like to base it on the default map.By the way. Cisco's default esmtp inspect map ...

Hi All,I have configured 3355 NAC appliances in HA pair everything is running fine.But not able to Login through GUI (Virtual IP) which is used during the configuration of HA pair.Kindly suggest on this, what is the issue.Please ask if you have any q...

Hi,I have problems with access to WS-SVC-IDSM-2 because when I try to access by CLI with command session slot 10 processor 1 appears following message:The default escape character is Ctrl-^, then x.You can also type 'exit' at the remote prompt to end...

Hello!Can somebody tell me that this is true, that the new ASA Platform 5585 does not support Multicast. Here on Page 7:http://www.cisco.com/en/US/prod/collateral/vpndevc/ps6032/ps6094/ps6120/design_guide_c22-624431.pdfbecause the old ASAs support Mu...

Hello all,I have an issue with my ASA5505 in Security Plus license, as you can see below I still have a vlan limitation number as if my ASA still have Base License. Does anyone has ever seen this behavior ? Any idea to fix this problem ?I already req...