Network Security

Hi.i want to know that in failover of ASA 5540 ,can we use management interfase as a failover pair?

I am trying to forward tcp port 1042 from the outside port to the telnet port of a host on my inside network. The problem is that all packets are being denied by the implicit deny rule on the outside interface. I know that the access-list that I conf...

We currently receive syslogs (informational) for all connections but have recently deployed an auditing tool that requires that each ACL also be set to log. Is there a way to globally set all ACLs to log?

                       Hello Guys,                                       I am setting up the config for a send VPN and what to use an name map statement. The problem is I do not know what the 10.255.255.0 is doing and I do not want to bother the othe...

I recently installed an AIP-SSM into my ASA5510.  This enabled the IPS functions in ASDM 6.2.5, but has caused some issues.  I am running ASDM on OSX 10.6.3.  Now ASDM will hang when closing the application.  It will also hang instantly when attempti...

dear experts, helloi'd like to ask a question about how the IPS can inspect and prevent any atteck in the encrypted packets in some sessionssuch as vpn or ssh sessions, is there a technique helping forthat in the IPS?thanks alot for your helplabib ma...

We have some <other vendor> IPS and for a new implementation we bought IPS Cisco 4270, i have taken the couse of Cisco IPS and I liked how it works. But we have a big problem thats apply to our company, at different level the manager, boss and the us...

Using NAT is it possible to Port Translate 2 ports ie tcp 80 and tcp 81 back to tcp 80 on 1 ip address?ie.static (inside,outside) tcp interface 80 10.10.10.10 80 netmask 255.255.255.255 static (inside,outside) tcp interface 81 10.10.10.10 80 netmask ...

Getting error message "access-list used in static nat has different local addresses" while configuring the static nat statement. But the configuration exists in the running config and the same is working fine. But upon reboot of the device the statem...

Hello Group, Need your help, I need your help on this. in my organization I use two different service providers in which for one service provider I have to use static IP and for second service provider I use BGP, is it possible to equally load balanc...

cisco does not recommend the use of management interface for failover.  one reason is the management interface is not Gigabit but a 100mbps link.  i monitor the traffic load on the ASA using MRTG. if my OUTSIDE, public facing, interface has a YEARLY ...

Hi,We currently have ASA's running 8.2(11) and I'm finding when we try and nat (outside to inside) the ASA does a route lookup and even though it's supposed to NAT, it then trys to route the connection back out the outside interface...Source:     10....