Network Security

routing between firewalls

I have a couple of ASA's on the same network, one pointing to the internet and a second pointing to other networks. The problem i have is if i use the internet ASA as the default gateway i cannot communicate with the other networks through the secon...

Difference between Syslog and SNMP traps

Hello, What is the difference between Syslog and SNMP traps ? Does Syslog mean every log message shown in 'show log'.

ISSUE :: traffic from inside_LAN to Outside_Internet

Hi,Voice application and another trade application running on port 10200 doesnt seems to work behind firewall((INTERNET))--[Router]---[Firewall]---[Core]the firewall is used for hosting Web server & site to site vpn ( natting public ip with private )...

Two ASA deployment scenerio: dynamic failover?

Hi,Currently I am doing migration for a customer, I am deploying/modifying two ASAs in parallel (for simplicity: two ASAa have same vlans for inside and outside interfecs, respectively). The inside interfaces are connected to two core switches 6513 (...

L2L VPN - peer and private address is the same

We need to create a L2L tunnel with a provider but their standard is that they require us to PAT our internal segments\hosts (AKA "interesting traffic") to a public address. By that they mean an address in the same segment as the OUTSIDE interface o...

PIX failover license

Hi,I have a situation with 2 PIX 525 running PIX OS 6.3(3) int Active/standby mode. The Primary has UR license, while the secondary FO license.The Primary is failing and the failover has taken over. I have 2 questions:- How can the license be moved t...

NAT host after VPN Termination

We have a site to site VPN which works perfectly ok. The host IP on our end is 192.168.35.10\32 which our vendor is accessing over the VPN tunnel.. no issues there.Recently we had to modify the IP address of the host to 192.168.45.10\32 and instead ...

Resolved! ASDM not loading after giving error

Hello ,i have 6513 switch with FWSM, i was a able to manage FWSM through the ASDM , then after doing some changes (adding log to the access-list)on the ASDM and then apply the changes, it gave an error that it is unable to submit changes . After that...

Proxy in PIX firewall appliance with 8.0.2 ver. of soft.

Hi all,we need to configure proxy functionality in our PIX firewall for our clients.What we expect is to authenticate our incoming client's requests not directly in web server placed behind firewall but use firewall itself to send requests to authent...

Easy way to transition from VPN 3005 to ASA 5520?

We're considering replacing a pair of PIX 525s and a pair of VPN 3005s with a single pair of ASA 5520s. I'm looking at the configuration changes that will be needed. The PIX side seems pretty easy... I've run the PIX-to-ASA conversion utility on the ...

Quick syslog question ASA 5500/8.04

Is there a way to get, from the syslog messages, which ACE of an ACL triggered a deny?frex, I have an object, Blocked_addresses, which contains 30 addresses. This is used in a deny in an ACL. This element of the ACL shows a bunch of hits, but no de...

ASA 5510 high memory usage

Hello All,I have noticed for 2 weeks that I have an 85-89 % usage in my ASA 5510.I have checked teh logs and nothing odd..the number of concurent connections ar about 500-600.What can I do to decrese teh memnory usage?ThxVlad

How to configure 2 external IPs on ASA Outside Interface

I need to have two external ip addresses configured on the ASA Outside interface. Both ip addresses will be on the same subnet and one will have VPNs terminated on it. I know it would be easier to just terminate everything on a single IP, but I hav...

PIX Throughput

What is the best way to see if the PIX throughput is being maxed out?..

Pix routing to internal networks

Hello I have a PIX 515E on 6.3(4) version with internal network 192.168.20.1/24. This is connected to switch and workstations on the switch with GW 192.168.20.1I also have another internet network 172.24.10.x which is connected via the main switch to...

Network Security

Forum Posts

routing between firewalls

Difference between Syslog and SNMP traps

ISSUE :: traffic from inside_LAN to Outside_Internet

Two ASA deployment scenerio: dynamic failover?

L2L VPN - peer and private address is the same

PIX failover license

NAT host after VPN Termination

Resolved! ASDM not loading after giving error

Proxy in PIX firewall appliance with 8.0.2 ver. of soft.

Easy way to transition from VPN 3005 to ASA 5520?

Quick syslog question ASA 5500/8.04

ASA 5510 high memory usage

How to configure 2 external IPs on ASA Outside Interface

PIX Throughput

Pix routing to internal networks

Hearty congratulations to the December Spotlight Award winners!

Renew.cisco.com just got refreshed, and it will make your life easier!

Announcing Resources That Guide You to Success

FMC warning when trying to run a deploy [update failed/in-progress]

FTD manger by FDM and RADIUS authorize-only

Possible to send IoC events from FMC to SNMP/Email?

Anyconnect on Cisco 886 not working

Change IP address of FMC HA standby node

AIP SSC-5 signature updates

Config ASA for outgoing emails from exchange server inside

FTD 7.0.5 export Certificate of Device Identity

"logging monitor debugging, logging buffered debugging..."

Firepower denying packets due to wrong category