Network Security

I'm getting syslog messages from IOS 12.4(9)T3 that I can't figure out what to do with, e.g.: %FW-4-TCP_OoO_SEG: Dropping TCP Segment: seq:1102628888 576 bytes is out-of-order; expected seq:1102605840. Reason: TCP reassembly queue overflowI've searc...

I have this problem that I am hoping someone can help me with:Pix 515 (R) with 64M RAM and 16MF running 7.2(3). I have outside and inside interface.Configuration is very simple I have a Linux host behind inside interface with an IP address of 192.16...

I have an odd problem I am hoping someone can help me with.I have a Pix 515 firewall Restricted with 16MB Flash and 64MB RAM. Whenever I tried to boot it with version 7.0.8 or 8.0.4, the firewall stays up for about 5 minutes and then it reboot itsel...

Hello everyone !I have 2 Pix 515 here in production, each one for an internet line.For six month , i have serious trouble with the one connected to the bussyiest one : every 1-2 weeks it reloads itself most often at the worst moment, where hundreds o...

One of our excutives is currently visiting Europe and is having issues using VPN through our ASA box, software version 7.2(2). She receives the following error message:"Secure VPN connection terminated by client. Reason 412: the remote peer is not re...

we are currently using an FWSM over 6509 as firewall for our various services.In the process of studying if it needs to be replaced in by a more complete firewall rather than using a module.Is ASA 5520 better than FWSM module. If yes, please suggest ...

I am running a asa5550 version 8.2(1) OS and 6.2(1) asdm. The asa was in a single context, I change to two separate contexts now my vpn configuration does not show up in asdm. The commands still show up in the OS.

I have a firewall that will be connected to ADSL Internet Line directly, to Cisco Router with Internet Lease Line for the Exchange Server, and the last interface to the Inside network. So the question is how i am going to configure the users to use t...

All, I am seeing quite a few of the following denied message logs: Deny udp src inside:10.1.2.166/137 dst outside:169.254.196.189/137 by access-group "inside_access_in" 169.254.196.189 is a well known address. Why would a machine be trying to send to...

Hi, I have a asa 5500 connected to 3 zones, 1. User access zone, 2. server access zone and 3 the internet zone. Now i need to permit sctp traffic with port 7777 etc... between user access zone to server access zone. The customer doesnot want any ...

Hi all,Currently i am running a Cisco ASA v8.0 IOS w/ UR license.I have a web server running behind the ASA (In the DMZ network) and an inside network (with access to the internet).I do run a host -monitoring software which polls the corporate websit...

Hi every one,we have two FWSM in our 6509 switches,fwsm's are in multiple context mode and are configured for active/active.we have two context= admin and public.here is detail:FWSM-1=admin(active) public(standby)FWSM-2=admin(standby) public(active)s...

Hi,Recently a audit point was raised by auditor, that the failover key is not enabled for the failover(PIX 515).Please let me know how to enable the failover key between the PIX firewall without any downtime.