Network Security

Dear Experts!We have several AIP-SSM-20s on the ASA and one of the AIP-SSM-20 has seen high cpu status one hours ago and it still going on.another AIP-SSM-20 has 2~20% cpu load.Is this normal status? Do you have same experience?I have one more quest...

Hello... here is the question...Based on the following configuration which option is correct?class-map type inspect match-all myprotocols match protocol httpmatch protocol dnspolicy-map type inspect myfwpolicy class type inspect myprotocols inspectzo...

Hello,I have a bunch of IPS which are not synced anymore with the ntp server( Core switch) sicne the time on that core switch has been modified.I there a way to force ntp sync on the IPS without having to reload the IPS

Hi Gentlemen,I m new to ASA FW. I just tried to configure the ASA FW by using the ASDM. But I cannot lauch the ASDM login page.I did the following procedure b4 login to ASDM page https://192.168.1.1/admin ( 1 ) ciscoasa# dirDirectory of disk0:/61 -rw...

I have a new laptop, Lenovo T400 with Vista Business ed, SP1 installed. ASDM will not run on this laptop: Every time it just dies/disappears right after I log in. I tried different versions ASDM, different ASAs. I knew from earlier experience that th...

Hi guys,I'm seeing something strange on my ASA log :Dropping TCP packet from dmz:10.x.x.x/23 to inside:10.x.x.x/45762, reason: MSS exceeded, MSS 536, data 556536 ?? Am i reading well ?When i do sh run sysopt :no sysopt connection timewaitsysopt conne...

I found the other night that on an ASA I was working with I could type login while in unprivileged mode and re-enter the same credentials I had just entered to login to the box (via SSH) to get myself into enable mode without ever having typed the wo...

I can't find direct answer on my search, is there anyone know which OID able to poll SSL users/Sessions from ASA 5540. I did google for last 3 days none of the OID I got not working. I am able to poll IPSec session though.Thanks

i have ASA 8.0 with static ip address and remote site has a ADSL ROuter with dynamic IP address.I am not able to make the Site to site vpn connection. I have tried dynamic map and standard site to site vpnconnection but nothing is working for me.Plea...

While using ASDM 5.2 for our PIX's and FWSM, I noticed that within the Access Rules, under Security Policy, right clicking on the Access Rule brought up the option to 'Show Log'. The pop up description of this function says "Show logs generated by t...

Hi,Here's my aaa config:aaa-server RADIUS1 protocol radiusaaa-server RADIUS1 host 172.30.10.24 key SuperSecretKeyaaa authentication ssh console LOCALaaa authentication enable console LOCALaaa authorization command LOCALhttp server enableWhenever I tr...

For sponsor authentication, Active directory is used without SSO.How is the connection between the server and active directory?Is it via AD TLS or AD SSL?Does somebody has more information about this?Best regards

We're using an ASA-5505 and have switched to a DSL line that uses an ActionTec m1000 modem. To pass the static IP block straight through to the ASA the modem needs to be in bridging mode - but when it is a straight pass-through the modem does not sen...