Network Security

I am trying to post some examples of this type of thing so that people might be able to avoid some of the problem I run into in configuring my stuff.I have redundant 6513s. I had not up until now the FWSM so I was at a loss as to how to configure th...

Hi NetGurus,I have configured 2 contexes called backend and frontend. I have given a default route on both the contexes to reach the SVI on the 6509 switch. I am only able to reachthe SVI IP from the both context and vice versa. But i am unable to pi...

Hello,My customer needs to connect one servers system in particular DMZ, with other systems in corporate LAN. The requirement is that all LAN servers/workstations can reach the DMZ server over particular ports. In the opposige direction, this DMZ ser...

Hello, I have configured the burst rate and average rate to 20 and the average drops/sec and current drops/sec is very well below 20. But I still see the trigger count going up with the syslogmessageASA-4-%733100: [Scanning] drop rate-1 exceeded. Cur...

I know my setup is ugly. I am double NAT'ing the pix as it sits behind my linksys router. So, the linksys gave the pix an IP via DHCP. I am able to browse to the machines behind the pix locally while connected to my network on the linksys, but unable...

Hi,I'm trying to query a mib for the asa to show me what IP peer is connected on a tunnel.When I do a mib walk on the 5510 8.2(1) none of the OID'S for these values show up, although they should be supported.Ie cikepeerentry or crasusername OIDs.I wo...

Hi, Can anyone tell me how to setup automatic VPN failover using 2 seperate ISP circuits. Eg, Our Local office has 2 different internet lines conneced to an ASA5510. we VPN from this office to all other remote locations. All traffic originates here. ...

I am experiencing a high amout of underrun packet drops for egress traffic out my inside interface on a ASA 5520 (avg 10 packet drops p/sec).  I am not completely clear on the understanding of underruns, but my understanding is that the harware is wo...

what other commands on the ASA, other than show interface, can show me some statistics about the interfaces? We have an external SNMP app that is reporting discards on our firewall interface. Show interface reveals noinput errors, CRC, frame, overrun...

Hi,One more question. What is the point of the static command given that you have the nat/global nat commands instead? In what scenarios would you use the static command and when would you use nat/global commands?ThanksDan

I need a VPN solution for multiple situatjions. Background: Simple LAN with unmanaged switches with single server 2008 running inventory application with about 20 users. I need to get a VPN solution to allow 2 things:1) Allow telecommuters to conne...