Network Security

Dear,I keep getting the following warning from the ASA ASDM syslogDuplicate TCP SYN from inside:192.xx.xx.xx/63993 to outside:xx.xx.xx.xx/25 with different initial sequence number. The client in question sitting on the inside of the ASA is trying to ...

Here's my situation. I currently have 802.1x working perfectly with Microsoft IAS, but we are wanting to use ACS 4.0 due to the fact that we also need the IP Phones to authenticate as well using EAP-TLS. I have configured ACS correctly (so I think) a...

HelloGot a 5520 with all the clients coming in on one interface and got a few other interfaces with servers behind them. In our group we are discussing how set this up with access-lists and or security levels.1: is to set lower security levlel on the...

Hi,Can any one  provide me the sample configuration in CLI to set up ASA 5510 in Transparent mode.I have a 2811 router and intend to connect my servers behind the ASA 5510 firewall in transparent mode.Thanks in advance.

Hey There,Can you guys look at these log messages and let me know what you think? Looks like my network is being scanned big time.What's the best way to address this issue? Is there a way to find out if my ASA/company is being targetted?Dec 10 2010 1...

I have an ASA5520.  I am curious if there is a way to restore the configuration from backup via TFTP.  Everytime I make a change to my config I back it up by doing, "wr net x.x.x.x:ASA5520.txt".   On the PIX515 you could enter the following 2 command...

We are currently at verison 8.2.1 on our ASA Firewalls and want to upgrade to 8.2.3 to resolve some security bugs.  Is there a way I can find all open bugs relative to 8.2.3?  I went to the bug toolkit and tried to find 8.2.3 but only found 8.2.  Doe...

Hi all,We're using SSM-20 for the moment and we plan to replace it with SSM-40. We'd like to know if- the IOS supporting SSM-20 will also support SSM-40 - the ASA and module will keep the config or do we need to configure the module and signature aga...

Hello,I've just received my CISCO ASA5510 in order to replace My SonicWall Pro 100 but i've one Problem, i explain :Actually ,the network has a LAN, a WAN and a DMZ.We 've got a 6 public IP block ( xx.xx.xx.xx / 29 ).I have two servers in the dmz usi...

Hi,I have installed and configured NAC 3310. I have configured L2 OOB virtual Gateway (As it is a central deployment). I did the following in my configuration:1. Install the Manager2.Install the Server3.Add the server to the Manager4.Configure Manage...

Hi all. My HQ office has a server that pulls sql data from other database servers located in our overseas branches.There is a particular site where my HQ server frequently fail to pull the sql data. My HQ traffic goes through a asa 5510 firewall whil...

HiWhen the NAC agent is running the CPU usage is normal when in authenticated network. When the USer PC is out of network, say in home, the CPU usage is more (80-100%) and causing the system to be hanged up. And when the NAC agent is exit from the ta...

So I tried to update the image on my 5505 and I messed it up.........badSo how do I get it back to the default settings....Currently looking at the console editor is see:Launching BootLoader...Boot configuration file contains 1 entry.Boot mode is 1. ...

Hi,We have two ASA5580s in HA mode and are having the same issue as reported in June 2009.  (Heading - ASA5520 inside shared interface). Until recently we have been receiving all syslog messages correctly. However now the syslog server is not receivi...