Network Security

Hello,Can i monitor the total (all context) use of Cpu in asa with multiple context?. I can activate snmp in system context and it use 25% of cpu.Regards

Dear The Expert,I am trying to https (443) port-forwarding.. tried below, but not working ;>(static (inside,outside) tcp X.X.X.X https I.I.I.I https netmask 255.255.255.255 0 access-list inbound_filter permit tcp any host X.X.X.X eq httpsclear xlatew...

Hi everyone,I would like to configure my Cisco VPN 3000 to support the windows password expiration.I followed this tutorial : http://www.cisco.com/en/US/products/hw/vpndevc/ps2284/products_configuration_example09186a00800946b9.shtml#In my architectur...

I can connect and browse the subfolders but when ever I try to download anything IE 7 just hangs. I am behind a ASA 5510. when I try to download the same file from my home PC it starts the download right away, which is why I think its my firewall. Wh...

Currently, I have a static mapping of my public mail ip address to my Exchange server on the inside of the ASA 5510 using the statement below:     access-list outside extended permit tcp any host 69.3.216.x eq smtp     static (inside, outside) 69.3.2...

Hi all,My Private address is NAtted on firewall. there is asterisk server Public address that i usally open from outside the office. but when i try to open it from inside network it doest work. even after my ip address is natted. but I am able to ope...

Hello,We have an ASA5520 which connects our offices to a larger corporate WAN which we deem as hostile.  We've always allowed traffic to flow off our network and onto the corporate network without any controls, however, following a recent virus outbr...

HelloI want to block bittorrent on pix or cisco7603. I want to block it completely (client can choose dynamic ports),so i need packet inspection. On pix525 i could not find any bittorrent inspection, on cisco7603 NBAR implementation is very poor(it a...

Hi, I'm trying to get info about a PIX with snmp but it's not working, I get a timeout when I try to query it. I'm asking to the inside interface over VPN, It works fine and I see all the computers on that subnet. I think I just need an ACL but I'm n...

My service provider just enabled TLS on their end.  Because of this, our scanning appliances do not work correctly are the SMTP channel is encrypted.  Is there a way on the PIX that I can block the STARTTLS SMTP command?  This way I don't have to do ...

I had a PIX515e fail on me last week.  I had to jump through some hoops.  I had to get a replacement and then reload the config. When I reloaded the config a series of commands were omitted. NAT’s and Crypto’s mainly.  I think this was because I ha...