Network Security

Hi all, did someone successfully applied ACL for MS-RPC service in an ASA or a FWSM ?   There is a lot of example but it seem to be generic parameter.We are requested to do as some other manufacturer does, by specifying RPC access based on UUID . (ie...

Not being too familiar with the ASA, I have everything configured I need and it is working. The problem now is, I am trying to get an additional external IP address working to point to a new server inside our network. In many other firewalls and even...

HelloI have 2 asa 5550's v8.2 in an active/standby config, our secondary failed and we have a new RMA unit from cisco.  After MUCH stress from tac getting the right feature set on it I am taking another stab tomorrow morning using the following proce...

How do you see who else is consoled in an ASA.I know:sh ssh sessionssh asdm sessions.What about telnet?or the console port?What about what level the user is at. On any connection, can you tell what privilege level they are at?

Hello guys,Can I use the external IP address to established (remote peer) IPSec L2L tunnel without physically assigning to the outside interface? Right now outside interface is private facing ISP. I don’t have the leverage to add router. Please let m...

Is it possible to exclude traffic which be default goes to IDSM. I have following scenario:LAN-->IDSM->FWSM-->Server VLANIDSM and FWSM are in one single chassis and all the traffic coming from LAN is captured and forwarded to IDSM before it hits FWSM...

Friday I upgraded my asa to software 8.2(2).  I found out monday that users running anything other than windows XP, can no longer obtain a DHCP address my ASA.  While trying to obtain a DHCP address a box pops up saying "There is an IP Address confli...

Hallo what can generally cause increasing of untranslate_hits on PIXos 7.0(4) like this: match tcp inside host 192.168.x.x eq 22 outside any static translation to PATAddr/222 translate_hits = 0, untranslate_hits = 24 thanks Pavel

Hi,Could any1 say to avoid the folowing interface errors 727 L2 decode drops949 overrun------------------ show interface ------------------Interface Ethernet0/0 "XXX", is up, line protocol is up  Hardware is i82546GB rev03, BW 100 Mbps Full-Duplex(Fu...

I've noticed the NAC is not receiving some of the critical windows vulnerabilities in April's Security Bulletin. The latest one I have is MS10-020 but what about 025, 026, and 027? Is there a reason why Cisco does not create the necessary rules for t...

Hi,I'm hoping this will be a quick and easy answer.If i have a Pix FW setup as secondary but running as active due to issue with Primary.Primary has been disconnected from the network and the Secondary, so the secondary is active but not connected to...

Hi, We have just deployed a NAC system with CSA. (CSA is not activated yet, but NAC checks the installation of CSA agent on the machines) We have one remote site connecting to the main site through GRE tunnel.The problem is the following at the remot...

Hi Guysam looking for link that help me to upgrade the following Software:IPS-4240:Software Upgrade from 6.0 to 7.0-------------ASA-5520: From 7.2 to 8.2----------------Thanks and Appreciate