Network Security

Hi ,I have configured my FWSM with no nat-control, simple routing mode, but i am getting following error log when i ping from host residing at the outside interface of FWSM to inside interface of FWSM, I know that inside interface of FWSM cannot be p...

Hi all,        I have configured 2 ASA 5520's in active/standby failover also  configured telent and SSH on the same, such that telnet uses  local datatabase for authentication and SSH use TACACS+ for AAA, the problem is that when trying to login usi...

Hello, I hope someone could help me out. I'm trying to figure out how the new NAT is working in 8.3. Problem:I have an ASA behind an DSL connection with exact one dynamic external IP (e.g. home office). In my internal network I have two servers one F...

Hi,  Can anyone tell me if this is ok? i see this two ports that are connecting to my exchange and AD. UDP outside1 192.168.1.106:6004 inside EXCH01:31970, idle 0:00:42, bytes 8, flags -UDP outside1 192.168.1.106:6004 inside EXCH01:31959, idle 0:00:4...

Hello,We have a VPN to a remote office.  The remote office has a ASA 5505 on firmware 8.2.2 and VPN's to my ASA 5520.  It has a 4mb line and sometimes this line hits 4mb's for up to an hour and I need to find out who and what it is.  In other offices...

SCENARIO :·         I have simple NAC setup with 1 NAC MGR “CAM” and 1 NAC SRVR “CAS”·         My users are running network 192.168.10.x/24 , and I wanna implement in L2 VG mode. Both NAC MGR and NAC SRVR can ping each other.·         CAM VLAN 55 = 1...

We have an ASA 5510 running version 7 of the IOS. The firewall is connected to a 3rd Party Cisco Router (not permited to access ) which in turn is connected to a LES. The LES circuit is 10Mb.As a school most of the traffic is HTTP based, in particula...

Hi friends,I have a ASA 5520 with a module AIP-SSM-10 and I try to upgrade it from version 5.1 (IPS-K9-5.1-8-E3) to version 6.0 using the file IPS-K9-6.0-6-E3.pkg and executing this command:IPS_A(config)#upgrade ftp://anonymous@<IP>/IPS-K9-6.0-6-E3.p...

Greetings,After the initial information gathering, I find I am at a standstill as-to how I should procede.We are currently in the process of implementing One-to-One static NAT'ing on our DMZ servers, and RE-IP'ing them to private IP space.We need to ...

We have a SIP trunk coming in over our internet feed. A scan has revealed TCP5060 being used for this service. I suspect SIP require additional ports to be available for RTP streams etc. Does anyone out there have a security policy solution/configura...