Network Security

hi experts, can I copy the running-config from asa with scp to a linux server ?I was reading the cli-command guide, but the suggested commandline does not work.scp -v -pw password filename username@fwsm_addressDoes anyone know how scp works with the ...

I have 14000 ACEs under one ACL. Actually I want to  block whole of the world except North America and Mexico. Any idea how to optimize this list . Any tool

When will Cisco Security Agent 6.0.2.* be available?

I have NAC configured and running in an OOB deployment using Window SSO. Most users authenticate into their computers and then NAC does the login and posture assessment using SSO and those credentials.We have a few users that have the Clean Access Ag...

/* Style Definitions */ table.MsoNormalTable {mso-style-name:"Table Normal"; mso-tstyle-rowband-size:0; mso-tstyle-colband-size:0; mso-style-noshow:yes; mso-style-priority:99; mso-style-qformat:yes; mso-style-parent:""; mso-padding-alt:0in 5.4pt 0in ...

Hi all,I have a pair of ASA 5540 that I will be configuring for Active-Active Failover. I have some questions regarding the capacity of both firewalls when configured for Active-Active Failover.Since the ASA 5540 supports 650 Mbps of throughput, will...

I have 2 FW ASA at network. The Active ASA responds ping amd snmp request, and standby responds timeout to request. The other items of the network also responds to this requests.How i have to configure the standby ASA to responds snmp peticions??

I need to be access network resources on the outside from the Inside interface IP address. I have been unable to pass any traffic originating from the INSIDE interface adress to anywehere on the outside of the network. Other INSIDE traffic is working...

I currently use IOS Classic Firewall on my routers and I am now testing the Zone Based Firewall feature, but it is behaviing differently with NAT than I expected. My requirement is to allow only certain hosts access to the Internet, and currently I u...

I want to be able to set up multple pats on an asa5550 and want to map groups of hosts to pats based on the host bit.example:pat 1, host bits end in 111pat2, host bits end in 110pat3, host bits end in 100.Is there are way to do this on an asa5550 run...

Hi!I been thinking quite a long time over this and i hope anyone here could help out.Is it possible to "route" traffic through outside interface and depending on what ip adress you are coming from you are directed to a specific ip on the inside? I kn...

Hello,I have a Cisco Security Manager that i use to make changes on 2 corporate firewalls.  The idea is that both firewalls will get the same set of rules applied to both when making any changes.I am trying to push a VPN update to both today.  One ta...