Network Security

I have a DMZ configured that should normally only allow traffic to http, mail, etc. However, I would like to allow admin traffic like ssh from certain IPs as well. For example, my DMZs are behind one IP range from one ISP. My LAN is behind another IP...

1. How can I see what software versoin the sensor is running.2. How can I manually update the sensors image. 3. How can I see through the cli when the signatures were last updated.4. How can I unblock traffic that is being blocked by the Sensor.

I am not able to get WCCP working on the ASA (with Websense).  How does the ASA know the IP address of the websense box as I am unable to see it in the configuration?Below is what I have configured.  My clients go out to the internet but are not redi...

i have FWSM added in CSM , after i discovered all the configuration on the fwsm , i tried to add an interface , the  when deploying the change , the session hanged , i accessed the fwsm to see what is the problem , i found 6 vlan interfaces deleted b...

Hi,I am trying to setup two pairs of ASA 5510s which they will both be setup as Active/Standby. The failover interfaces will be connected via Ethernet to the same switch. Do the interfaces need to be on separate individual VLANs on the switch to work...

Hi. I'm having issues trying to manage a Pix 501 remotely on one of  our satellite sites. I can connect to it locally using ssh client  (putty) and PDM but neither work from outside (Internet Explorer cannot display the webpage - via PDM). As far as ...

I have a NAC Manager with two licenses OOB and now I put two more CAS HA OOB licenses butafter I put that licenses i saw that Active Manager added just CAS OOB and Standby Manager added without problem.take a look these pictures.thanks

Hi,Is it possible to know what "shared key" was used for NAC communication (CAS and CAM) in a setup that is currently in production?RegardsPrasanth Mathews

I have a Cisco ASA5505 that is dropping it's internet connection at random times. I can clear it by cycling the power on the ASA but with our weekend VPN users this is killing us. I have a copy of the config below and would appreciate any feedback. W...

Hi,all:my config like this:Class Map match-all 1 (id 3)   Match protocol dnsClass Map match-all 2 (id 4)   Match protocol http host "*cisco.com*"Class Map match-all 3 (id 5)   Match not class-map 1   Match not class-map 2Policy Map 1   Class 1   Clas...

Hello.If i set a service policy for the ACL match Any source and Any destination to 10Mbps does that mean the total is limited to 10Mbps or the maximum for each individual connection is limited to 10Mbps?Thanks.

Hi every body,I have configured my ASA 5520 (Software version 8.1) as active/standby failover and it works very well, however i want to perfect my configuration. regarding my network topology, i would like that the primary device will be always activ...