Network Security

Good afternoon,I've seen ACLs that state "permit" and I've seen ACLs that state "deny" when attempting to define "interesting" traffic or traffic that should be sent to the AIP-SSM when used in a ASA5510. My question is, If I have a deny statement, d...

Hello,Has anybody ever done ASA's NetFlow with Flow Monitor plug-in of WhatsUp Gold? I am running ASA 8.2.1 and WhatsUp Gold 14.1. NetFlow is already configured on the ASA. However, the Flow Monitor home page displayed only 2 interfaces; one is Adapt...

I am familiar with the Track command to watch an IP SLA setup for routing and fail overs. The other day i noticed someones ASA confiugred with a Track command and it looked like it was used for the routing and fail-over stuff.Can someone give me some...

Hi all,I'm currently managing a Cisco ASA 5520 firewall running ver 8.2(1) with an IPS ASA-SSM-10 running Cisco IPS Version 6.2(1)E3. Since last month however, we have been getting this unusual errors reported by the IPS module:IPS software attempted...

Since upgrading ASAs from v7.24 to v8.21, the ASDM VPN L2L sessions no longer displays the names of the tunnel-group peers as defined by the name command. Works fine in v7.24. I found this a really useful feature to identify remote peers by name rath...

Hi allI have a query regarding Cisco ASA Firewalls in failover mode . I want to insert two new AIP-SSM-20 cards inside that .Earlier there was no AIP-SSM modules inserted and the ASA was running smoothly in failover . Now when i will introduce the AI...

Hi there,I've integrated CSM v3.3.1 into ACS v4.1.4 within Common Services/AAA Setup and setup a Bulk Import of Devices from ACS into Common Services.  Have also setup default device credentials.This seems to be working fine, in that I can login to C...

Hello,I was just curious if anyone heard any Cisco's plans to implement a true OOB management interface on ASAs, so this interface does not use the global routing table (has some kind of a default GW for itself or maybe a policy based routing stateme...

Hi Folks,We have been working with Cisco PIX and ASA firewalls in past. Recently, we have started to evaluate Juniper firewalls in comparison to Cisco. Initial comparison puts Juniper on top of everything in Security. Here are few stats.FeatureSRX 36...

Hi!We have a HP network load replicator/generator which simulated live network traffic. We are running the ASA’s through a test where about 85Mb of “live” traffic is being pushed through it (plain HTTP). The initial tests resulted in a large number o...

Hello! I'm battling with one problem - I need to detect and (attention) to produce an alert (say, an e-mail alert) after the detection of a DDoS attack - let's take TCP Syn Flood on a particular IP.What I have: MARS and ASA/AIP-SSM which is controlle...

After recently moving all our server infrastructure offsite, our firewall needs in our corporate office have been simplified: establish VPN tunnels to our datacenters, block all public incoming traffic, selectively block outgoing public traffic.  Sin...