Network Security

Hello experts,I have set a deny packet action to the signature 16297 Worm Activity and It works when the Victim is unknown but it is NOT working when  the victim is 0.0.0.0  it does not deny the packet.Thanks,

Hello,I have two firewalls in layer 3 mode, single context, active - standby.Is it possible to make the primary after a failure to become active again, without having to type failover active?thanks,george

Hi,We recently had an issue with our DNS and noticed that our CAM was unable to see our CAS while we are having DNS issue.  Is there a possibility for the DNS to be a cause of failure of either a CAM or a CAS?

Hi All,                My ASA software version is 8.2 (2) and ASDM version is 6.2(5) .Now I m getting the error when I try to launch asdm image from Vista OS PC. the error is : your firewall image has a version number null which is not supported by A...

Hi,I have 2 ASA 5510 and i want to create failover between them.The 2 ASAs have the Security Plus license and 3DES enable.But when I try to create the failover i obtain the following error message "Hardware module compatibility for platform failed"Se...

Hi,I have ASA 5510 (8.0.2), ASDM 6.1 and ASA-SSM-10 6.1.When I run "sh shun statistics" at ASA, I receive the folloing:outside=OFF, cnt=351inside_backup=OFF, cnt=0dmz=OFF, cnt=26059inside=OFF, cnt=18414Does it mean that Shunning is not working. If so...

Is it possible to create a QoS policy to prioritize inbound traffic to our web servers from clients, while also shaping the traffic outbound for user Internet access?For example, I would liket to create a priority queue to guarantee a certain amount ...

Configurations: Normal desktop user connecting to a URL that incorporates Google WEB Tools (GWT). With either a PIX, 7.2 or various ASA units, the browser screen times out. With SonicWall and Checkpoint firewalls, the page displays normally. All comm...

I have web sites in my ASA5510 CSC-SSm that I am not blocking or filtering but when I go to these sites I don't get the pictures for the sites.Can someone tell me what I need to set to allow them?Thanks

I am running an SSM_10 and am curious does any konw the sig to block the torpig, sinowal rootkit. My ISP is telling me it is in our network but I can't seem to find it. I want to block the traffic, if possible via my IPS module.Thanks,D

HiCurrently in our network we are using PIX 515E in thatwe have done all NAT access from outside to inside for all web access for example:static (inside,outside) tcp 1.1.1.1 23 X.X.X.X 23 -- is this PAT is applied to both inbound and outboundstatic (...

Hello all,I'm new to Cisco firewalls and so apologise if this is a stupid question....I have set up a firewall following the "Securing networks with ASA" cisco press book, but I can get no traffic to traverse my firewall. It is an ASA 5510, and I jus...