Hi everyoneWe are busy evaluating an ASA5520 + AIP-SSM-20, and are noticing that if we push 30mbit through the firewall, the CPU goes up to about 70%. I'm talking about a single FTP transfer. The inspection load, however, stays below 10%.We are not u...
Hello,I am installing 2 asa ASA5510-AIP10SP-K9 in failover active standy mode.I know how to assign virtual sensors to ASA contexts in multiple mode (active/active failover).But i want it to be done in single mode (Active/standy failover).Any idea wil...
I have a interesting issue.I installed a ASA 5510 in our network, transparent mode,inside the network we run apple xserves with AFP file sharing turned on. Our network has 3 others building running on other subnets.All traffic runs well thru the ASA,...
We are using 802.1x NAC framework environment. On the clients PC we have CTA 2.1.107, CSSC, and CSA. Some times we have a problem with NAC validation. In the CSACS log we can see the following message “Posture Validation Failure (general)â€. In th...
HiI hav2 2 6509 switches which are working as core switches.In each 6509 i have IDSM-2 module.The Aggregation 6509 switches are doing the routing for the vlans and connected to core 6509 from where traffic exit for wan & internet.In my IDSM2 i am pl...
I just bought an ASA5505 with the base license running the following:asa803-k8asdm-611I'm very new to the ASA's and Security in general so bare with me. I'm able to successfully launch the ASDM client and login, but I'm restricted from accessing the...
Hi,I have Cisco 6509 switch with IDSM-2 & FWSM modules. IDSM-2 is having 6.1(2)E3 version and it's CPU-1 & Analysis engine is showing 100% CPU utilization continuously.Please help me to resolve this issue.Thanks..Akhilesh
Hi is there a way to do a host summary report that gives me a list of all of the hosts and their current status.I know I can run a detail report but this gives me pages and pages of information, and I can run a management report (host count) which is...
Hi guys,I have configured my 1841 router to be a Master NTP server.This router has 5 VLANS and hosts coming from all those VLANs can successfully act as NTP clients to get the proper time from the 1841. However, on one of those VLANs, I have an acces...
I am working on ASA5510 which has 3 ethernet interfaces. I have allocated outside, inside, DMZ for each interface. But I want to configure two subnets on inside interface. I found there are 4 physical ports in the ethernet interface. The light is on ...
Is it possible to identify dynamic dns update packets using a class-map (and thus write a policy to drop them)? I see "match header-flag", "match dns-type", and "match dns-class" in the command reference, but I can't find anywhere that these values ...
Hello all,We (my team) are dealing with NAT configuration everyday, on Cisco routers and firewalls.The following document "NAT order of operation" is very useful, and we have been looking for a long time to the same document for ASA and PIX firewalls...
