Network Security

i am receiving "DENY TCP (connection marked for Deletion) from 10.20.1.x/3698 to 10.17.0.23/4343 flags SYN on interface tech on my FWSMI verfied there is no rule in place that would cause this deny.We have several dns servers in the "services" vrf (s...

Helo,I'm trying to establish a vpn connection between an ASA with ios 8 and a Cisco Anyconnect client 2.4 on Windows Vista 64bits. I get the message "Unable to establish vpn connection" before the requested login data. I've trying in other pcs with t...

One Cisco PIX at datacentre(remote) and one asa5505 and one PIX 506E at my office both are creating VPN to data centre but now i need to access asa n/w from pix n/w which are in the same LAN..

Hello, I have several questions about the integration of Cisco ASA 5500 and IPS 4200 devices in my system. I tried to read everything about the subject but I have to design something quickly and I need several answers as fast as possible: Concerning ...

Hi,can someone confirm me that when I do an license upgrade from 20 to 50 contexts in a FWSM, I don't need to do a reload?Thank you.Best regards,

Hi Experts,I am asked to configure FWSM active / passive mode. Also the requirement is to configure the switchover time to as minimum that when I ping from aDESKTOP PC of one zone to another Zone, I should not get not even single request timeout.I co...

Is there any way, maybe through LUA script to check for membership in nested groups?IE a user is directly a memeber of "Location Employees""Location Employees" is a memeber of  "Company Employees"Making the rule allow anyone that is a member of "Comp...

I am needing some assistance regarding a firewall.  I am going to try and explain it below to see if someone can help my poor brain out.inside      10.10.x.xoutside     20.20.x.xdmz         30.30.x.x.This is how my global/nats are set up.   global (o...

<p>Hi all</p><p>Is it possible to connect IPS in inline VLAN pair as shown in figure considuring redumdancy?if possible how should i connect physically?If not please give me an alternate solution.Thanks in advance.</p>

Hi,I have certain rules in firewall as below:acl servers_in line 1 extended permit tcp 192.168.100.2 255.255.255.252 host 10.83.0.2 eq 443acl servers_in line 2 extended permit tcp 192.168.100.2 255.255.255.252 host 10.83.0.2 eq 445acl servers_in line...

Hi,I am troubleshooting an issue with Voice Connection thru the FWSM. Our Network Team wants to know if  "Voice packets marked with EF (DSCP – 46) bit" passes thru the FWSM or not.To check this I am  using the packet capture thru the CLI but that doe...

Hi..I have read that the fwsm has a serveral anti-dos option.I has seached the fwsm anti-dos related document in CCO, But I can't yet.first of all, I would like know that, a. anti-dos feature in FWSM b. if anti-dos in FWSM, How can I configuration?, ...

I would like to configure two firewalls on two different ISP as a failover setup.I normally set the firewalls as primary and standby. The goal would be to detect the outage and failover to the secondary but I do not want the configurations sync beca...