Network Security

Hi,We have two sites connected via a 1Gb trunk. There is a cluster of Nokia IP530 firewalls, split between the two site. Everything was working fine until the core switches were changed out on one of the sites (went from a Cisco 4507 to Cat6500 with ...

Dear friends,I need to tidy up my ASA5520, which includes remove unused access-list, NAT etc. what is the best way to document my ruleset?Need advise on VPN, we have alot of 3rd party companies dial in, they are currently use a mixture of secure desk...

dear allCan I have a support regarding:1- Allow monitering PIX 525 V7.2 from http or https

I've configured rip with these commands:router rip network 192.168.2.0 network 192.168.10.0 passive-interface outside passive-interface dmz redistribute connected metric transparent redistribute static metric 2 version 2!inside:interface Ethernet 0  ...

Hi halijenn / allI have a query in context with the Inbound and Outbound traceroute via the ASA Firewall .a) To configure the ASA to show its internal network from the outside network:ciscoasa(config)#access-list internal-out permit icmp any any echo...

I recently have run into an issue where PDM for older PIX firewalls does not load, It allows you to log in but the PDM window just does not load. If you notice you'll see an error in the lower left of IE that says: exception: java.lang.ArrayIndexOuto...

How do I know if my CAM HA-Pair's database is syncronized between the two.We are currently running a "white list" by mac-address and every once in a while, a MAC is entered into the filter list as "allow", but then has to be re-entered again. Also th...

Hi guys,i got this problem after i reboot my NAC.Starting jexec:  Starting jexec services[  OK  ]pkp_drv: module license 'CAVIUM' taints kernel.Starting perfigo:  Starting High-Availability services: [FAILED]heartbeat: 2010/04/19_14:55:47 info: NAC n...

Hi Guys,I've a test pair of ASA 5510  firewalls that run across sites in an active standby configuration both running asa821-11-k8.bin.However I've noticed that at random times every few days the following messages appear in the log of the primary un...

Hi,I am see about 500-700 pkts being dropped every second on the outside interface of my ASA 5520.(current load is about 30000 pkts/sec)This output (below) is entered every 5 seconds. You can clearly see overruns, no buffers and input errors are incr...

Hi,as recent increases in DNSSEC deployment are exposing problems with DNS resolvers that cannot receive large responses:WHICH ARE THE CONFIGURATION OPTION AVAILABLE FOR DNS ON CISCO IOS FIREWALL and IOS ZONE BASED FIREWALL ?The maximim reply size be...

In our company we have ASA5510-SEC-BUN-K9. Is it possible in any way to configure "switchport mode trunk" and "interface vlan" commands adding a modul (SSM-4GE) or a licence (L-ASA5510-SEC-PL) to ASA or ...