Network Security

Resolved! ASA Upgrade from 8.0.4 to 8.2.217

Does anyone know if you can upgrade ASA 5505 from 8.0.4 directly to 8.2.2.17? Concered of going from 8.0 to 8.2 train.Thanks Mucho!!!!

Sometimes ASA firewall inspect sip failed

Hi experts,My ASA firewall use for VOIP. Sometimes the ASA firewall inspect sip failed. For example,The SIP invite message with SDP information sent from inside to outside of ASA firewall.The private address in SDP body message had not be replaced by...

problem when entering the IPS module via IDM

entering the IPS module installed on my ASA I get the following screenerrorMessage: ct-sensorApp.438 not responding, please check system processes - The connect to the specified Io::ClientPipe failed. name=errUnclassified Thanks,

FWSM cpu utilization

Dears, i have FWSM installed 6500 BB , its S/W 4.0(8).when we add any ACL line , cpu go from 5% to 95%.the traffic is not affected.any help please.

Resolved! PIX 515E: 3DES Upgrade Issue

Hi folks!Got a PIX 515E firewall with an Unrestricted license. I want to upgrade it to 3DES encryption. I register for the upgrade on the Cisco web site, it recognizes the serial number, and I'm sent an activation key. However, when I go to enter tha...

Resolved! Cannot RDP out through a 2811 with Firewall feature set

Hi all, I’ve inherited a 2811 router with a firewall feature pack from a previous support guy and it looks in a bit of a mess. I'm having problems RDPing out through our 2811 with firewall feature set. I have a route map pointing to an access list pe...

Setting UP ASA 5520 for Failover

I have (2) ASA 5520 Firewalls with three Interface. Port 0 is used for Outside, and Port 1 is used for Inside Network. Is it possible to used Port 2 for both LAN and Stateful firewall configuration. The idea is to create sub-interfaces on Port 2 suc...

Resolved! How to deny outside incoming ICMP to ASA 5520

I thought any incoming traffic from the outside interface of an ASA 5520 is denied by default. From home, I can ping the public IP. Any explanation?Our 5520 is connected via DSL router to the cloud. The DSL is allowing ICMP. I created an access rule...

IPV6 and failover 8.0.4

Hi,we are getting the following messages in our PIX with 8.0.4 SW version:%PIX-6-110002: Failed to locate egress interface for UDP int_inside:IPV6add to IPV6add2%PIX-6-110002: Failed to locate egress interface for TCPint_inside:IPV6add to IPV6add2thi...

Resolved! VLAN PAIR

Guys I have a little and stupid question.Is there any problem with TCP when using VLAN Pairs. Does the IPS reset the connections? Problem is that I'm doing a PAIR for example from vlan 50 do VLAN 51 when the trafic is originated from vlan 50 it will ...

NAC Agent 4.7.2 Won't Refresh IP

Running Windows 7 64-bit on corporate laptop w/ docking station with Cisco NAC 4.7.2. NAC works fine identifying and authenticating to production network.at first boot. If system is undocked, the wireless network is detected and NAC refreshes the IP....

unknown IPv6 coming into ASA from internet

Hey folks,I'm getting this message from an Internet-facing ASA:<166>Apr 17 2009 18:57:26: %ASA-6-110002: Failed to locate egress interface for TCP from Outside:fe80::a962:9b85:350e:8826/56460 to fe80::bc27:8961:e606:5643/2869I have a router front-end...

Resolved! PIX 515E: Configuration Errors at Boot Up

Hello!We've purchased a used Cisco PIX 515E firewall that we are using to replace a previous firewall of the same model. I have successfully copied the configuration from the old unit to the new via TFTP. Everything appears to be working normally...