Network Security

Hello,I have configured the failover for ASA 5520. The configs are pefect and failover is triggering properly except DMZ interface. The problem i m facing is when i shut the interface for DMZ on primary ASA the failover does'nt happen but when i shut...

Dear All:We have NAC  version 4.8.0 and the agent version is 4.8.1.5. The deployment type is Out-Of-band virtual gateway. Windows SSO is enable and working as a champion but the problem is when the agent successfully login the users the CAM logs out ...

Our ASA 5510 is running 8.0(5). We recently upgraded the license from base to security plus. By doing so the capacity of the the external port Ethernet0/0 and Ethernet0/1 should increase from the original FE to GE. But, we were still seeing 100 Mbps ...

Hi there,One of my customers are facing a DDoS attack on their email servers. I am in charge of ASA config.Here is what I have done so far and it was not very effective:tcp-map LimitEmail  check-retransmission  checksum-verification  exceed-mss drop ...

Hi ,Anyone has experience on INLINE configuation for IDSM-2. I have a setup where user vlan (L3) resides in FWSM @ Data Center switch and IDSM resides in another 6509 switch which connects to INTERNET.Both of these 6509 switch communicates via OSPF.A...

Hi,Can any one have any idea on why we are seeing huge number of "Windows Account Locked" alert in Cisco IPS device towards only one Windows server.We checked whether Windows server is generating any malicious traffic by scanning the server but nothi...

Can someone advise if Cisco IOS CBAC FW really does deep packet inspection. CBAC (with inspect engine configured)does not update signature patterns as does Juniper & Check Point fw. It seems that CBAC, inspect engine is limited. I say this because th...

Estimados,Tengo configurado el acceso via VPN Remotp (VPN Client) y me conecto al ASA y me da una direccion IP de la subred 10.10.1.0 pero no puedo ver la subred 192.168.88.0 que es la INSIDE y donde deseo llegar a algunos Servidores y PC's .... Por ...

Hi All,I am running 2 x Active/Active 6509-E chassis with ACE & FWSM Mods in multi context in a high avaliability Data Centre.Ruuning IOS 122-33.SXI2aRunning FWSM 4.1(2)Running ACE A2(3.2We are seeing some wierd issues and wonder if you can help. Usi...

Hi,I've configured two ASA's in failover mode as follow:primary ASA:failoverfailover lan unit primaryfailover lan interface FAIL GigabitEthernet0/3failover link FAIL GigabitEthernet0/3failover interface ip FAIL 10.1.9.24 255.255.255.248 standby 10.1....

I am trying to open port 52199 on my ASA 5505I have gone to firewall, access rules and then add tcpip.Not sure if that is the correct place but cannot get it to workThanks

when I try and ping a dns server I have static router behind the cosci 501 pix I get no response.the server responds to dns requests just fine.what am I missing?access-list outside_in permit icmp any host 91.114.187.8access-list outside_in permit udp...