Network Security

Hi,Most of us knows that ICMP is not a stateful protocol, and we can make it using ICMP inspection in ASA.As per my understanding,In TCP, TCP Flags are making TCP capable of stateful protocol, In UDP, src and dst port numbers playing the role to make...

We are looking for a clarification of ASA nat-control command. Unfortunately, we don't have spare device to test it out.The situation is as follows:An ASA firewall has three interfaces: "inside", "outside", and "corpinside".nat-control is DISABLED.A ...

How to display the status of the power supply on the IPS 4270since the IPS has two power supplies and one has failed, so i want to check what is causing this failure (i am looking for a message from the CLI describing that the IPS power were failed).

Hi,my pix515e which is running 8.0x ios unable to access internet through it. domain name server is external(ISP), on it's next hop router ip domain-name ip address is configured. could u tell me what changes i should make to my firewall to make it w...

I have a pix 500 firewall box.I have a system which is on DMZ and IP is 10.40.1.16, there is webserver running on this.Whenever VPN users connect to VPN they are unable to access this system. But the moment they disconnect VPN they are able to connec...

Hi allIm having an issue where I am trying to telnet to my standby asa, to get it to work before I had to redistribute a static route back to my main network this then allowed me to telnet to both standby and active asa's. however the static route wa...

hi halijenn / pkampana / allI am upgrading ASA (in failover) from version 8.0 to 8.2 which i believe is next minor version for 8.0 (as 8.1 is used for ASA 5580) so please let me know if Zero downtime is possible for the same as per the below link or ...

Hello Experts,I´m implementing INLINE VLAN PAIRS in two 4260 and a 4270.I know that the BYPASS is a software failover. But what is going to happen if the hardware fails???? Who is going to do the VLAN re-tagging???What is going to happen with that tr...

Our application-log on our 4255 running 7.0(1)E3 is showing 96% full. I don't see any GUI or CLI commands that pertain to the application-log. What is it and how to you clear it?Craig

HI,Currently we have 1st tier and 2nd tier firewalls as Cisco ASA 5540. We are planning to replace the 2nd tier firewall with ISA firewall. We have our ironport box located in outside DMZ of 2nd tier firewall. Is it advisable to do so ?? what are the...

Hello,I am trying to add a firewall ASA5505 between netopia 3347 router and my LAN. My connection is like this (LAN --- ASA5505---NETOIPA--- INTERNET).  DSL is provided by AT&T.  I have 5 static IP addresses. Netopia router is working in PPPoE mode a...

Hi!i have FWSM with this config:!interface Vlan35 nameif vlan35 security-level 100 ip address 10.10.35.1 255.255.255.0 standby 10.10.35.2!interface Vlan37 nameif vlan37 security-level 5 ip address 10.10.37.1 255.255.255.0 standby 10.10.37.2!...!ssh 1...