Network Security

Hi,we are using Cisco ASA with LAN and DMZ ones. generally internet will get with Outside interface IP address which we can get the IP details. here i want to get NATed IP instead of outside interface IP.is it possible to do that?For example, Outside...

Hello,Last night and this morning after the latest signature release s472 I have been getting hammered with alerts from this signature - nids http evasion - signature 24339.  The description says it fires on the occurence of %3f in the URL.  The desc...

I am trying to upgrade my ASA 5580-20 from 8.1.2 to 8.2.2 through the ASDM wizard. I get the following error: Server returned HTTP response code: 500 for URL: https://10.0.0.2/admin/disk0/asa822-k8.bin. I haven’t been able to find out what that error...

I have firewall ASA 5510. Currently I am having 2 Mbps Internet link. Everything is working fine but one of the branch users where we are having site to site connection is complaining about the slowness. So we have decided to arrange one more Interne...

Dear Team,My customer is having 8mb lease line.The site to site vpn is created between ASA 5520(Near Side) and ASA 5540(Far side).The mail and other erp applications are running through the tunnel. All the servers are located in far side.The normal t...

Hello,Does Cisco FWSM support Policy base routing?Thanks

I have a single URL which will direct users to one of four ASA5520 devices, can I export a single certificate onto all four devices or do I require four individual certificates?

I have an ASA 5510 with the CSC-SSM module. We get alot of people telling us they sent us email though I do not know how to check to see what email has been blocked. In Exchange server I can verify exactly when any email hit the server and what the s...

If a FWSM is using the default 12 partitions and there are contexts in ALL the paritions, what would be the impact of entering "resource acl-partition 6" on the contexts in partitions 6-11?Would they automatically get re-assigned to partitions 0-5?

hi,   I'm trying to test ipv6 on an ASA.  I want to pass all ipv6 traffic from the inside to the outside using the simplest possible routed configuration.  I think I must be missing something, because the config I think should work doesn't seem to pa...

Hi ,we have Cisco PIX 535 firewall.We are getting deny logs in syslog server. <156>Feb 23 2010 19:23:45: %PIX-4-106023: Deny icmp src wanif:x.x.x.x dst secmif:y.y.y.y (type 11, code 0) by access-group "wanin"<156>Feb 23 2010 19:23:45: %PIX-4-106023: ...

hi! I've a few questions to verify with the configuration shown below.1) i created a context called test-no-vrf(transparent mode) with vlan 240(outside) and 241(inside) created in the 6509 switch and i'm able to access the GUI using ASDM.  If i would...