Network Security

There is no explicit "nat-control" command in ASA 8.3. But what's the default behavior for NAT? If there is no NAT rule matching the incoming packet, does the packet get dropped, or simply passed through as is?The 8.3 Migration document mentioned a s...

Hi Guys, I have a asa5510 and i am looking to get a 10 user SSL licence will a 5505 10 user license work?...please can someone tell me what product code i need for a 10 user SSl licence on my 5510. many thanks James

HiI have an old pix 501 here (version 4.2) and no one seems to remember the password for it. I tried a password recovery over tftp using the nppix.bin file for the 4.2 version but the pix froze after it copied the file from tftp (It displayed the Rec...

hello, anyone can help me to know about the "inspect". I need to know what apects the inspect can check (TCP, ACKS, or something like that) or what documents I can check to understand the concept better.Greetings.

Hi,I am stuck with an issue, in my office a lot users are using various download managers/accelerators etc., I want to block these kind of access.NBAR PDLM's can't help me and even I even URL blocking can't helps out.Please give a best possible solut...

I have a 5520 ASA that is used to terminate site-to-site IPSec tunnels.  Occasionally I see a high number of input errors and overruns on the inside and outside interfaces.  Both interfaces are 1 Gb/s and our Internet circuit is 100 Mb/s.  The SNMP g...

Does anyone know how to make a port forwarding from a domain name instead a IP address through the ASA 5505 (8.2)in my specific case a domani name form dyndns.best regards,

We are about to deploy a Microsoft Hyper-V High Availability cluster and I want to understand how my thinking on segregating the servers in the DMZ aligns with best practice.Each server in the Hyper-V cluster follows best practice and has a dedicated...

Hi, Can anyone explain me the difference between the three, packet drop , packet loss nad packet discard. I have an understanding on packet discards but would like to know if packet loss and packet drop are the same.Which of these can be made availab...

Hi,I have configured my ASA 8.0 as a pppoe client on the outside interface. My pppoe is getting authenticated and then getting the IP address from the router. But when i am trying to ping the default gateway its not giving me a reply. Secondly, when ...

Hi, I installed ACS 5.2 vmware image to test some scenario. I have a problem with setting active directory configuration. It worked when I first setup this, from this time I can see Status: CONNECTED in Connection Detail page but I am not able to lis...

Hello,I am using the CSM 4.0.1 to manage several IPS (AIP-SSM-20 and 40 and IPS 4260).The configuration archive is nice to have the latest conf for my IPS device, however they are in a XML format!But I need the config file format the same way it is g...