Network Security

There is a scrubbed config file at the end of this post.       Symptoms:   Some hosts connected to the inside interface cannot reach websites or even ping our gateway, but some can.   They can ping the LAN's gateway and other hosts on the inside, as ...

Hello1)what is the function of this module:CSC-SSM? and how it connect physicaly  to network?is it on the inside or outside or DMZ?2)if i have 2 asa for hight availability ,do i need to have 2?Please explainThanks

Dear All,i am trying to telnet from my firewall to router through command promt....it gives me a black blank with a - .....what are the parameters to be configured to access the router.Regards,

I am with a problem in one of the firewalls of my company. - Almost everyday the firewall stop working and I need to restart it because I lose the remote access; - This is a ASA 5505 with 7.2.4 firmware; - There is a configuration default that I use ...

What, if any, drawbacks are there to using Internal CA generated certs (ex. Microsoft CA Server) vs. 3rd Party Certs? Besides the obvious drawback that you have to add the internal CA server to all the NAC devices and I'm guessing clients running the...

We have a transparent firewall context on a FWSM (code revision: 3.1(16).Recently the number of tcp connections has been increasing to a point where it hits the limit defined in the static and new connections are denied. However a "show conn | inc x....

Hi forum,I have a dual ISP setup, with two separate output interfaces.  I'm automatically monitoring the primary ISP via "sla monitor" and "track" commands, and removing the default static route when the ISP's router is not reachable. That's working ...

/* Style Definitions */ table.MsoNormalTable {mso-style-name:"Table Normal"; mso-tstyle-rowband-size:0; mso-tstyle-colband-size:0; mso-style-noshow:yes; mso-style-priority:99; mso-style-qformat:yes; mso-style-parent:""; mso-padding-alt:0in 5...

Hi forum,I'd like to create a QoS class/policy map for VoIP traffic to steer the traffic to a priority queue.  I'd like to configure this such that traffic with DSCP EF *and* to/from specific IP addresses are matched.  It isn't clear to me whether th...

Hello, i have 2 5520's running active/standby. How do i connect to the standby unit to load a IOS upgrade with zero downtime? I can ping my standby ip address from the primary/active unit but obviously cannot telnet from there. can i only connect to ...

When two FWSM module works in Active/standby mode,it seems that the standby unit is invisible,how can I monitor its state remotely ?

Hi all,Is it possible to do port redirection in transparent mode ASA..??Please helpThanks