Network Security

Hi,Need to know the difference between, Source NAT and Destination NAT... My understanding is the Source NAT is No-NAT and destination NAT is the actual NAT.Also, there are two type of natting, one method is to map a group of IP addresses coming on i...

Hi every one,can i reimage my sensor with this image :IPS-4240-K9-sys-1.1-a-7.0-1-E3.imgmy idsm2 is in image 4.1 !!! now i dont want to upgrade it instead i want to completely reimage my sensor using above image.can i do this or i need image file for...

Hi,I have a IPS 4240 with software version 6.2(1)E3 running. Lately I've been having problems with low performance on this equipment due to high cpu utilization going to 100%. I need some troubleshooting tips or commands I can use to determine what i...

I have a security incident were someone is using putty to get around our internet filter.  What they are doing is tunneling through on port 8080 and 443 to an outside server that acts as a proxy.  I can't block port 8080 or 443 for this group of user...

I have gone through all the docs but cannot find any mention on how to set up a "reject" instead of the regular "deny" in an access rule.  I have some legacy Checkpoint Firewalls and want to migrate them over to some of my ASAs.  Some rules ont he Ch...

I just want to start a discussion on how some of us may be controllingweb access.  I have reviewed some of the ASA features such as outbound firewall authentication but it doesnot seem to scale and it does not seem to operate real well with multiple ...

Hi,I am seeing Junk characters as seen when the Bits/sec is set wrongly.I am sure i am using the correct Line speed etc stuff, as the same console cable moved to another ASA works fine.Tried realoading the ASA to see if that helps but no luck.Any ide...

I have a progblem with the policy object data base.  One of the realities of working with object-groups that are shared on multiple firewall and then integrating them into CSM, is that differences may exist within the object-groups of the same name. ...

I support a OBGYN Clinical site. They went with a internet base Phone Provider, Were the Provider installed IP phones that connect to their site thru our existing PIX 506e for dial tone. My question is do I need to Upgrade the PIX 506e, Or Is the PIX...

Hi,I am building a new VPN implementation for a customer using a Cisco ASA 5550 and a NAC 3350 appliance. Due to the availability of switch ports, my customer is inquiring to see if the ASA can be cabled directly to the untrust interface on the CAS. ...

We have an ASA 5540 failover bundle working in Active/Standby mode. On our active asa 5540 when the sh run command is issued it gets stuck and displays the output after more than 15-20 mins.. and it takes another 10-15 mins to get back to the prompt....

We have a ASA 5520 with 2 IPS's. Received the following error in the ASA-IPS.  Any suggestions would be greatly appreciated.evError: eventId=1265315511818687793  vendor=Cisco  severity=error    originator:       hostId: wps-asa-ips2      appName: mai...

Hi,I have Cisco ASA in my environment. I enabled netflow option and then started collecting netflow packets using Wireshark. When I analyze the packets collected, I found the below discrepancies.1. Private Enterprise Number(PEN) field is not expected...

Hi all, I recently upgraded my 5510 to ASA 8.2(2) and ASDM 6.2(5) from 7 and 5 so I could take advantage of webvpn. Ever since then I've had serious memory problems. The ASA is leaking around 1MB per hour. I've disabled all webvpn related stuff and r...