Network Security

Hi there,I'm attempting to configure DCERPC inspection on an ASA5510 and I'm running into problems.  My goal is to allow connections from a host on a DMZ interface to a host on the inside interface.I first added an ACL entry on the DMZ interface to a...

Hello,   I have my asa logging to a linux box but it won't log acl events.I've done countless acl's in cisco routers, for example with an entry like below I see all the incoming web traffic.access-list 100 permit tcp any gt 1023 host x.x.x.x eq 80 lo...

I'd like to hear some comments from people that have used the redundant interface feature on the ASA. Has there been any noticeable benefit in failover times?Or can the failover polltimes be tuned so that this feature is unnecessary and is not worth ...

Dear AllCurrently i am having Cisco ASA 5550 with Version  7.2(3) .I am planning to upgrade it to /* Style Definitions */ table.MsoNormalTable {mso-style-name:"Table Normal"; mso-tstyle-rowband-size:0; mso-tstyle-colband-size:0; mso-style-noshow:yes;...

Hi halijenn / kusankar / NT ,I am having an issue in which customer is having ASA 5520 firewall pair (active , standby) , 8.0.3 Code running in mutiple context mode and having VPN Premium license.There are huge no. of context (approx 14) configured o...

Hi everybody,My question is: I have an ASA5505 as default gateway (192.168.60.101/24), and a CME router in the same network (192.168.60.254/24) which has others subnets behind, 192.168.61.0/24 (VoIP) & 10.1.10.0/252 (CUE). All my computers has the AS...

Hi folks,I would appreciate if someone shed more light on the error we started getting in the router's syslog after enabling SMTP application inspection. Our users started complaining that they don't receive mail from some clients and it really makes...

Hi,Trying to allow NFS port 2049 through ASA firewall. It is not accepting the nfs portthat is required by WebNFS.Any way to configure it?Appreciate your help.Thanks in advanceSubodh

Hi,ASA 5510 with no IPS/CSC modules.Can I use the MPF to prevent files with extension .torrent from being downloaded?Can you specify this using HTTP inspection or regex?Thank you,Federico.

Hi All,I am having the issue with my IPS 4260.Whereas the IPS system time is correct, and I have set a UTC offset of 330 min (being in the GMT +5.30 hrs time zone.), I am still seeing the event(log attached) time on the event(monitoring--event-event ...

I have a 4255 IDS/IPS sensor running v7.04, everyday at 2pm it is doing something that causes it to either reboot or stop passing traffic long enough for my firewalls to think that I am no longer passing traffic which forces them to fail-over.  I hav...

PC----------> Router -----------> ASA ------------> ISP          E0/0          E0/1     E0/1     E0/0I am trying to setup a new ASA 5505 to connect through my ISP.  It is a base-license unit.I am DHCP'ing an address from the router.  (192.168.0.X)The...

Hi everyone, first of all, I'm sorry for my english!!! I have a Cisco ASA with 03 interfaces:- outside (172.1.1.0/24)- primary (1.1.1.0/24)- backup (2.2.2.0/24)Also, I have one primary server with its backup server located in other site. Both servers...