I'm trying to understand the risk rating calculation on an IPS4240 sensor. From what I can tell, it looks like there are some additional parameters added to the equation that are not easy to determine. It looks like the ARR (Attack Relevancy Rating...
Hello,I have a task of replacing PIX515E ver 6.2(2) to ASA 5505. I have read that I need to upgrade PIX to ver 7.0 before I can just use tftp and move the config to ASA. However, if I dont have an option to upgrade what is the best way to go about it...
Hi,I am trying to get cut through proxy to authenticate SSH connectivity. If I use telnet, the firewall will proxy correctly and force local AAA authentication however, when using SSH, the connection is dropped with error :processing uauth_error, ses...
We have an ASA 5505 configured to an integrated T1 that also provide VoIP through Unity Express. The firewall also hosts a L2L vpn with a second site. The problem is that when users download files from the second site, the T1 inbound becomes fully ...
Came across an unusual example of NAT in an ASA recently, difficult to explain but it looked like it was doing a double NAT.E.g.Outside IP 222.222.222.222Mail server 192.168.1.10 (real IP)In the config there were standard nat rules which translated t...
Hi everyone,I have a Cisco ASA5505 installed. config is below:pb-gw2# sh run: Saved:ASA Version 8.0(2)!hostname pb-gw2domain-name pshb1.localenable password mjgSKfuQzL4x1LLu encryptednames!interface Vlan1 nameif inside security-level 100 ip address 1...
Hi,Just a quick question: how many signatures IPS have by default? in IPS7.0.I've noticed some versions with 4700 or 3700, any official number?Thanks,-Dave
Hello, I created two IP L3 interfaces (SVI’s) in a Cat6500 MSFC, each one in the same IP subnet, but in different VRF each. Can I configure a FWSM bridge-group in transparent mode, so that the FWSM performs L2 inspection between these two MSFC SVI in...
Hello all,I have a customer with a failover pair of ASAs 8.0, each with an AIP-SSM. The AIP in the secondary ASA is not accessible via its IP address, so cannot be accessed using IDM or ASDM, or ssh. It can be accessed by sessioning into the module...
Hi.. i'm facing a problem with my PIX515E with FO license. Each time my firewall reboot, my crypto key for ssh is gone hence i'm unable to use ssh as my remote access method. Is it part of PIX515E FO license limitation? appreciate that someone can gi...
We use a ASA5505 for as a firewall appliance and for users to connect to SSLVPN via the webvpn client. We can connect fine from home but we would also like to be able to connect from inside the firewall to be able to install the client onto new noteb...
Hello, there may be some problems with the ASA's config, but I can find where are the problems.Below is the basic config for this ASA:Inside ip address : 192.168.10.1/24Outside ip address: 120.195.153.151/26DMZ ip address: 192.168.30.1/24Web s...
I have MI424WR-GEN2 connected to the internet , and I have four static IP's , I have one static IP for the MI424WR-GEN2 and configured the NAT , protocol any.and did configure the CSA 5505 the outside VLAN with static IP info , the switch say up and ...
Hello,I try to configure an ASA appliance in transparent multiple context mode. My topology is like this :Router (Gi0/0.101 10.10.10.1) \--- (Eth0/0.101) ASA (Eth0/1.1) ...
Hello,i have asa 5540 and we are copy file from remote location to local server, we got Log on asa thats belowDropping TCP packet from outside: dest_ip to DMZ:Ip , reasone : MSS exceeded, MSS 1380, DATA 1480What is the reason of exceed ?We are abl...
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide
| Subject | Author | Posted |
|---|---|---|
| 07-16-2025 04:21 AM | ||
| 07-06-2025 01:40 PM | ||
| 07-04-2025 01:59 AM | ||
| 06-19-2025 07:32 AM | ||
| 06-17-2025 01:07 PM |
| User | Count |
|---|---|
| 10 | |
| 5 | |
| 5 | |
| 2 | |
| 1 |
