Network Security

Hello,I am having problems with a FWSM with multiple contexts implementation.One of the contexts has a inside interface that must have a EXPLICIT deny ip any any.The problem is:When I put the ACE with the explicit deny at the end of the ACL all the t...

Hi , I have a quick question regarding the ASA-5585 with 2 10Gig port IPS module.  When the IPS module runs a separate application from ASA and the traffic between the ASA/IPS is flowing in the back plane, what is the use of having two 10 Gig ports...

Need to configure HSRP in routers, But in ASA i have only one gateway                                      ROUTER 1-->ISP1LAN --->ASA--->L3---->                                      ROUTER 2--->ISP2in the above setup explain,In ASA, 2 interface used ...

Hi,i have a Cisco ASA 5550 with firmware version 8.2.I have read the documentation about the static routing tracking feature.Is this feature working if i set two static routes with different metrics to the same destination subnet, but one route is ap...

Were trying to use our polycom VC through our ASA 5510 but everytime someone calls in we see a Deny Outside_in destination port 1720 tcp in the syslog.It doesnt make sense as we have all the following ports open on the outside interface (H323 coloum)...

I would like to create exceptions within particular signatures to ignore IP addresses. How do I perform this task?

(Addresses are made up)I have a Multicast server (1.1.1.1) that is multicasting out on address 224.1.1.1  on an interface called CLAN . I need this mutilcast to be routed out of the inside interface to a client on the internal network.The mroute comm...

Does any one know what constitutes acceptable password characters on version 7.0(4)E4 of the IPS Software?I'm in the process on testing the sensors with RADIUS authentication against ACS version 4.2. ACS backs of toMicrosoft AD for accounts and passw...

Hi All,In our client organization we are going to migrate the new firewall with existing setup. Here, In the existing  setup they are having Pix 525 and the new firewall is ASA (Pix is the end of the sales now). As per my understanding we cannot bui...