Network Security

Hi AllI have an issue with ASDM 6.1(5)F. I have 2 FWSM in 2 chassis with A/A failover. We made one of our FWSM active for all contexts during anpower issue at the other site, this has been powered on and commands are being replicated from one chassis...

Hi All, we have IPS 4240 with MARS 25. I like to export netflow from IPS to the MARS for anomaly detection. But I couldn't find any document to show how to configure netflow analyzer in IPS to export to MARS. if you show me any documents, I would be ...

Hi Guys,I have a pc which has cisco vpn client 4.x installed on it and it is behind the company's pix firewall.What ports are required to be open on the firewall so that it will allow outbound vpn connection from the pc. Is it UDP 500 or anything els...

I'm using version 4.6.2.113 of Cisco NAC agentI have windows XPI just installed AVG Anti-Virus Free 9.0. It is up and running correctly.Windows security center recognizes AVG however cisco does not recognize that I have an AV program and will only al...

I get deny tcp ( no connection) message on one of my firewalls for a certain connection attempt, with flag SYN ACK.I did verify the conn timeouts, they are appropriate enough for the connections not to timeout.Please advise on this problem.Thanks!

Device: IPS 4240MOde: all 4 interfaces on Promiscuous Objective: To monitor 4 different vlans namely vlan 10,20,30,40 across the network.There are 8 switches on my network with vlan 10 - 40 info (vtp trunk)How do i configure SPAN on VLANs that exist ...

not the loopback if your thinking of that !!can we configure 2 asa's to listen to same logical IP address ie.. from the below diagram router would route to the ASA on 1 logical Iptwo interface of asa would have the physical Ip !Looks like Harp and Vr...

We have the following zones on our firewall:InsideOutsideDMZThe inside contains a wireless 'guest' network (10.7.20.x/24) if I want to connect to a device in the DMZ (10.7.30.24) USING the mapped outside address 171.145.23.32, how would I do it?I can...

Hi,How do I know what traffic passes my ASA.I am looking to get history of traffic which gives Source/destination/ports/size send inbound and outbound of ASAThanks upfront.

We have an internal router in our network with three hosts behind it. I need to know how to NAT an external IP address across our ASA - in essence to allow remote access to each host in turn behind the internal router. Is this possible? I've done sin...

What is the difference betweenicmp permit any echo OUTSIDE andicmp permit any echo-reply OUTSIDE...Which one of the two will stop me from disabling pic to the ASA from outside.