Network Security

Hi all,I am new using FWSM and I have find out a problem that I did not have with the ASA. As I have read, ASAs permit traffic for outbound connections (from high to low security level interfaces), but in FWSM that it is not allowed and everything is...

Hi , I have a Windows 2008 server acing as DC connected to one of the interface of ASA 5580, and have couple of ADC in the branches which are connected to different interfaces of ASA.  The routing is happening through the ASA. When trying to do DCPRO...

HiI Didnt find the ISO Image for the IPS 7.0,Could y plz tell me the me the full name of it?either for 4215 or 4240 ApplianceThanks

I'd like to put a rule in place on our ASA that will drop any incoming SMTP traffic that has a FROM address matching our domain. For example, drop any inbound SMTP traffic that has a from address of *@mycompany.com. However, I'm really unsure how to ...

Hi all,       My NAC server was configured with AD SSO and was working till, we decide to change the untrusted interface ip address. When we eventually change the ip address to the orginal and restart the AD SSO service the SSO service refused to sta...

Hello all,I have a very strange VPN issue that I cannot get to the bottom of... Hopefully someone can provide some assistance.The tunnel comes up fine, phase 1 and phase 2 complete successfully, but no traffic passes over the tunnel. This has been an...

I am trying to configure the HTTP(S) Timeout on our ASA 5510. Per MS Article 905013:We recommend that you increase the firewall time-out values for HTTP(S)  requests to the Exchange Server Microsoft-Server-ActiveSync virtual  directory to provide a r...

I have a vendor who wants to access some of our staging servers over the Public Internet. Vendor will be sourcing from 201.57.56.10Our servers are on Inside Network and the addresses that the vendor need to access are:10.20.100.110.20.200.1Do I need ...

I am in the process of rebuilding my ASA 5510 8.0(5) firewall configs and I am up to the point of building the remote-access VPN tunnels.Now I am not sure if this is possible without a RADIUS or a VPN Concentrator but I figured I would try.What I am ...

Asa5505 suspends with "i2c_write_byte_w_suspend() error, slot = 0x0, device = 0x40".  Entered rommon changed confreg-reg 0x41=not successful, load image via tftp still suspends.  Installed image is ass723, also tried asa802 from another device with s...

I'm deploying NAC for a large enterprise. They would like the use the NAC for posture assessments but manual remediation. If the users do not meet the windows patch and AV requirements they are expected to manually remediate their systems, not using ...

hi,current ios 7.04 on pix515E doesn't support features like track link and many more, so i would like to upgarde it's ios.so can i further upgrade it that ios which is updated and will work on pix515E ?????????RegardsHasmukh Suthar