Network Security

Hi All,I am observing a issue where am not able to ping couple of devices across the FWSMThe configuration permits ICMP from the source subnet (172.16.10.X/24) to the destination subnet (10.10.10.X/24)But we are not able to ping host 10.10.10.12 from...

Hello all,I have an asa wichi s configured to handle to network, one dmz and other inside network, I can map my inside subnet to public ip with nat but I can't do this with DMZ subnet , I thought I configured correctly, I also attached my configurati...

Hi,We are going to purchase ASA-5510-SEC-BUN-K9 in order to configure failover do we need only the same model of firewall ? or is there any thing like software feature or hardware port we need to have to configure the failover.Regards,Faisal

Has any one seen the output from a show  run  just hang for 2 to 3 minutes before continuing.notice it at this line:    snmp-server enable traps snmp authentication linkup linkdown coldstartand at the     service-policy global_policy globalalso does ...

Hello,I am configuring ACS 5.1 to allow device management of cisco devices. However I am facing issues with the Command set on the ACS 5.1.I am allowing certain commands on the ACS to be allowed by certain set of users. I am unsure which privilege le...

Hi all!The Problem is, that in a remote location is a FAX-SIP-Adapter with his factory default address 192.168.2.1. I need to configure this device.In the remote network has the address range 192.168.170.0/24.Well, I tried to change the intern interf...

Hi Folkswhen we config on the asa ACL permit ip any any ,that mean every thing is open through the firewall .a.k.a tcp udp rtp traffic?am i right?

I'm experiencing a very big degredation in throughput when I route through my FWSM. But it's a strange issue.We have a 6513 with a FWSM. If I take that vlan out of the firewall group, and don't route through the FWSM, I can hit 900+Mb/s using PerfSon...

Hello everyone I am having some issues with IOS 15.1.3T on a 2911.  I'm by no means a Cisco expert and am trying to teach myself the ins and outs of IOS but am having some difficulties that I am hoping someone can help me out with.  The first issue I...

I need to plan a firewall replacement (old 515E) with something newSIP server on the inside (unfortunately not Cisco)SIP provider on the outside, udp/5160Does the ASA support SIP/udp on non-standard ports? Info on the documentation is a bit unclear/c...

Guys, I have got an question from a customer asking how IPS GC deals with legitimate ip addresses being spoofed and used for attacks. Customer is concern about their customers ip address being spoofed and marked with bad reputations and after receivi...

Is it possible to write an custom signature to look for a specific response (a field/value within the packet) in replys to packets that have already traversed the IPS.  And if no response was recieved in  x amount of seconds an alarm would fire.