Hi,I have a PIX-501 that has the following licenses:Licensed Features:Failover: DisabledVPN-DES: EnabledVPN-3DES-AES: DisabledMaximum Physical Interfaces: 2Maximum Interfaces: 2Cut-throug...
Hello,We are using 6513 chassis with sup 720. Slost 1 , 2 contains FWSMs and configured as failover .The issue is that when we try to access the primary slot fwsm byCORE-6513_SW1#session slot 1 processor 1The default escape character is Ctrl-^, then ...
Hi all, What is the recomended method to secure the access to Internet zone devices (router/switch) with public IPs? SSH enabled to access via Internet and is configured as transport for line vty with firm owned public ip ACL, even then the sitch/ro...
My customer has a PIX 515 HA, version unknwon. We need to do password recovery. Am I right in saying that the following sequence will work?Reboot standby, determine SW version from consoleVerify standby is operational after rebootDownload correct u...
Hello !Is there a way to configure my ASA so that it can block an IP packet (TCP or UDP) based on its size (total size, or even better, on the IP payload)?Thanks!
Hi pkampana / halijenn / allI want to know if i configure the management interface of asa 5510 as failover link , the cpu utilization will go up or not . As per the thread below , the more connection replication, the more traffic for the failover lin...
Hi,Just finished researching on options concerning the aip-ssm 20 module and am now at a dead end. I understand that there is no option for syslog, email alerts. SNMP apparently is only for critical-device related alerts. The thing is i am despera...
I have a FWSM with context in way routed, I want to know if I obtain to inspect a field TCP of one determined application that works in door 3000?The problem is that I have an application that works with VPN for some customers and without VPN for ano...
Hello all,I am trying to get an ASA running v7 OS working as an easy vpn server behind NAT in the following scenario:ASA(EZVPN_Server)-----Gateway----Internet-----Gateway-----Router(EZVPN_Client in NEM mode)There is a static nat entry on the gateway ...
Hi all,I currently have a 2800 series router with firewall OS which NATs port 443 to my Exchange server (see below).ip nat inside source static tcp (exchange IP) 443 interface FastEthernet 0/1 443I would like to evaluate RDP (Terminal Services) for r...
I configured my ASA 5510, please find attached my network diagram for reference, and following configurationPleaase review my configuration and advise what should be denied and what should be permitted,moreover please check basic security levels are ...
dear experts, helloi'd like to ask you if we have two subnets each connected to a specific ethenet interface on the ASAfor example:10.0.0.0/24 connected to E0/1and10.0.1.0/24 connected to E0/2the question is: if i want to let the hosts of subnet 10.0...
i have a fwsm and aproblem apper after configuring a new dmz on it, the new severs has a rechability normal form all over the network, however between them not as , its unix based arp -a gives one assignment of fwsm mac address point to ip address of...
I saw this message in my CAM: Warning: Current and entity certificate has expired or is due to expire in less than 30 daysI know this is due to SSL certificate is ready to expire.. but i want to know what is the result if the certifcate expried after...
I just setup a new Cisco ASA 5510 with the help of the wonderful support staff at Cisco. My setup is as basic as they come: on a t1 going to my firewall then my layer 2 switches to my lan. I need to allow traffic for my exchange server, RRAS serve...
