Network Security

Our ASA 5510 is running 8.0(5). We recently upgraded the license from base to security plus. By doing so the capacity of the the external port Ethernet0/0 and Ethernet0/1 should increase from the original FE to GE. But, we were still seeing 100 Mbps ...

Hi there,One of my customers are facing a DDoS attack on their email servers. I am in charge of ASA config.Here is what I have done so far and it was not very effective:tcp-map LimitEmail  check-retransmission  checksum-verification  exceed-mss drop ...

Hi ,Anyone has experience on INLINE configuation for IDSM-2. I have a setup where user vlan (L3) resides in FWSM @ Data Center switch and IDSM resides in another 6509 switch which connects to INTERNET.Both of these 6509 switch communicates via OSPF.A...

Hi,Can any one have any idea on why we are seeing huge number of "Windows Account Locked" alert in Cisco IPS device towards only one Windows server.We checked whether Windows server is generating any malicious traffic by scanning the server but nothi...

Can someone advise if Cisco IOS CBAC FW really does deep packet inspection. CBAC (with inspect engine configured)does not update signature patterns as does Juniper & Check Point fw. It seems that CBAC, inspect engine is limited. I say this because th...

Estimados,Tengo configurado el acceso via VPN Remotp (VPN Client) y me conecto al ASA y me da una direccion IP de la subred 10.10.1.0 pero no puedo ver la subred 192.168.88.0 que es la INSIDE y donde deseo llegar a algunos Servidores y PC's .... Por ...

Hi All,I am running 2 x Active/Active 6509-E chassis with ACE & FWSM Mods in multi context in a high avaliability Data Centre.Ruuning IOS 122-33.SXI2aRunning FWSM 4.1(2)Running ACE A2(3.2We are seeing some wierd issues and wonder if you can help. Usi...

Hi,I've configured two ASA's in failover mode as follow:primary ASA:failoverfailover lan unit primaryfailover lan interface FAIL GigabitEthernet0/3failover link FAIL GigabitEthernet0/3failover interface ip FAIL 10.1.9.24 255.255.255.248 standby 10.1....

I am trying to open port 52199 on my ASA 5505I have gone to firewall, access rules and then add tcpip.Not sure if that is the correct place but cannot get it to workThanks

when I try and ping a dns server I have static router behind the cosci 501 pix I get no response.the server responds to dns requests just fine.what am I missing?access-list outside_in permit icmp any host 91.114.187.8access-list outside_in permit udp...

Is it possible to run CSM 4.01 on two different servers (with two seperate licences).I have issues where I manage a Cisco ASA 5540 and the rules on one CSM are less than the other CSM.The disabled rules are missing from the rulebase with less rules.T...

Hello,We have installed CSM 3.2 on C drive of server and now the C Drive is full,Now i wan to route all the stuff of configs and logs and etc,etc  to D Drive,how can i do that.Please help Dears.Thanks

Hi,We have Cisco ASA 5520 firewall. ASA Version - 8.0(4). ASDM Version - 6.1(3). Firewall Mode - Routed.We want to configure QoS for some subnets and enable policing such that they cannot use more than 1mb of bandwidth.I think we cannot create more t...