Network Security

Hi all,I upgraded an ASA5505 with IOS 8.2.2 and copied a config file from another production ASA but then the ASA5505 (8.2.2) won't establish the tunnel with the ISR, I can't telnet or SSH to the ASA. I verified the config file and compare it with th...

Hi,we are planning on ussing the FWSM to protect our server farm and also secure our departments (VLANs) from each other. I just want to know what is the best approach to this comming to security levels. we have 6 departments, 1 development server fa...

Does pix 7.2 supports wccp redirection to waas using services 61 and 62?br

I recently noticed that my ASA 5540 has been using up a considerable amount of memory, around 870+ megs.I powered cycled the unit and the memory use went down to around 250 megs (under typical network loads). This is becomming an issue because its ef...

We have a PIX515E on software 8.0(4).  We are in the process of upgrading our mail gateway and I need to modify our NAT statement to facilitate traffic.  Here is the scenario:  The mail gateway has an inbound and outbound interface on the same privat...

I have an ASA 5520 being used for VPN. We're running AnyConnect SSL client and I have a dhcp scope of 190 addresses. I need to increase this scope as more users connect to it. Can I add a new dhcp scope within the existing subnet mask / broadcast dom...

Hi,Does Site to Site VPN using hostname is supported in Cisco ASA firewall?Regards,Arun.L

/* Style Definitions */ table.MsoNormalTable {mso-style-name:"Table Normal"; mso-tstyle-rowband-size:0; mso-tstyle-colband-size:0; mso-style-noshow:yes; mso-style-priority:99; mso-style-qformat:yes; mso-style-parent:""; mso-padding-alt:0in 5.4pt 0in ...

Hi Is there any limit on nat capabolity on an ASA or is this dependent on ram/ cpu ?I ask as i have 18 nat pools and 18 Global outside addresses ( a subnet per pool going to a single outside address pat / nat ). Each PC connection can have 100 + conn...

All...Here's the scenario:There's a host on the internal network that has a reverse shell to the outside world, and the packets being sent back to the attacker are encrypted, over a standard web (TCP/80) port - which is allowed by Websense or URL fil...

Hi!I need your help to understand something about the stateful inspection.Say we have a source X (initiator) that wants to access a destination Y that is in the "inside"  network of the ASA. The source X is accessing Y across a tunnel.We have an Cryp...