Network Security

We have an ASA 5540 failover bundle working in Active/Standby mode. On our active asa 5540 when the sh run command is issued it gets stuck and displays the output after more than 15-20 mins.. and it takes another 10-15 mins to get back to the prompt....

We have a ASA 5520 with 2 IPS's. Received the following error in the ASA-IPS.  Any suggestions would be greatly appreciated.evError: eventId=1265315511818687793  vendor=Cisco  severity=error    originator:       hostId: wps-asa-ips2      appName: mai...

Hi,I have Cisco ASA in my environment. I enabled netflow option and then started collecting netflow packets using Wireshark. When I analyze the packets collected, I found the below discrepancies.1. Private Enterprise Number(PEN) field is not expected...

Hi all, I recently upgraded my 5510 to ASA 8.2(2) and ASDM 6.2(5) from 7 and 5 so I could take advantage of webvpn. Ever since then I've had serious memory problems. The ASA is leaking around 1MB per hour. I've disabled all webvpn related stuff and r...

Hi:We have a problem with H.323 sessions.. We have upgraded two Cisco ASA 5520 with 8.2(1) version. After this we have problem with H.323 sessions. The sessions are establish through Call Manager and communications works fine some minutes. Then the s...

Hi all:We have a FWSM pair with 3.1(17) version. Policy NAT is configured (PAT) but it's not working, this is the config (Nat-Control is enabled)access-list NAT-VOICE extended permit icmp object-group Cluster object-group Range-Voiceaccess-list NAT-V...

Dear all,All routes which i configured on my PIX 515E are:route outside 10.0.10.0 255.255.255.0 196.205.22.190 1route outside 0.0.0.0 0.0.0.0 196.205.22.190 1!router rip network 10.0.0.0 network 172.16.0.0 default-information originate distribute-lis...

HelloI have a ASA 5510 and connected a box on DMZ1 with a 192.168.xx address and setup nat and ACL to enable http.But for some reason when I tray to access it from the outside on the Internet I get this messed  Mar 02 2010 15:02:35: %ASA-0-106100: ac...

I have the following setup on our network: ASA5540 SSM-20 AIP module, 10.255.x.xPIX Firewall <===>ASA5540 Management, 10.255.x.x/\ /\ | |\/ \/Router<===> ASA5540 Firewall <===> Internet (Cisco updates)The only access to/from the 10.255.x.x network is...

The recent deployment of IPS-engine-E3-req-6.0.5.pkg caused a significant incrase in CPU. Top shows sensorapp as the primary culprit. Anyone know what major changes caused this behavior?

Hi I was reading this documentation http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a0080834058.shtmlfor doing active/active failover using pix 8.0. But I have the impresion that the concept of stanby used on pix firewal...

Hello,I am trying to configure Microsoft CA server to so it can be able to work with a VPN session that I want to establish however I don´t know how to configure it. Can you please point to some good document?Windows Server Enterprise SP1 running Cer...

I am wondering when to apply active/active failover on two ASA. Is this typically deploy for multi-mode (ASA with different customers/context)? Thanks.

Hi all,I have a 4260 with 6.0 Image that is not completing the booting sequence, it stops at "grub". As you are all aware, the 4260 do not have CD drive to boot from.Any idea how to recover it. I downloaded the recovery image with .PKG extension but ...