Network Security

we get following error on firewall when access is checked.portmap translation creation failed for tcp src local: 10.70.10.2/13222 dst subs3:10.90.0.1/500110.70 is our local segment & 10.90 is one of our subsidary located outside of the region.Pls adv...

Hi,We're using Citrix 4.5 on MPLS network with 170 branch offices for one big centralized business application. We're are already using QoS to differentiate Citrix packet traffic (ICA and CGP). We're facing some problems when keyboard/screen refresh ...

Dear experts!I have used to run AIP-SSM-20 module on ASA.I`m wondering that it really works to inspection and bloking the packet.I have not found the log message for inspecion and bloking log message anywhere on the ASDM menu.SO I really want to see ...

HelloDifferent application needs different ports to pass traffic from inside to outside with ASA placed inbetween.Instead of allowing all ports ; how to streamline with needed ports. Struggling to get it working. LANUSERS_____switch____ASA_____INTERN...

We are having an issue with video calls dropping after 2 hours. This involves the Polycom VSX and our 525 PIX 7.2.1, Here are bits of the config, any suggestions would be apprrciated. timeout xlate 2:00:00timeout conn 1:00:00 half-closed 0:30:00 udp...

Hello,I have a question regarding dynamic policy NAT and IPSEC Site2Site connections.Kinda hard to explain, but I will do my best.The current setup is - two sites, site A (ASA 5520) and site B (ASA5505). Botw with FW 8.2- Both sites are connected via...

Is this possible after enabling Security Context on ASA 5510 .Requirement: Will be able to allow Dedicatedly Vlan 5 Traffic (In Red Line) to use ISP-2 to communicate outer world and Vise versa if I ...

Hi,We are running an IDSM-2 with 7.0(1)E3 and 2 virtual sensors.I want to filter alarms from sig 2004 for a monitoring server.When adding an event action filter, it still sends alarms. Bug?? Is there another way to filter the alarms for a specific ho...

Hi: CAN ANY ONE TELL ME WHY THE MAIL SERVICE IS SHOWING DOWN/STOPPED IN THE CSC-SSM MODUEL ??I HOPE THIS IS NOT BECAUSE OF THE BASE/PLUS LICENES EXPIRATION. Pls confirm me....The CSC SSM RegServer service is runningThe CSC SSM HTTP service is running...

We are trying to establish vpn connection using cisco vpn client on laptop to a vpn concentrator in a remote office. All network devices are in the same private network. There is a Cisco ASA 5505 firewall sitting between VPN client and VPN Concentrat...

Which release is the most recommended and stable for ASA5505 now?We're just leveraging ASA as a SSL-VPN gateway.Regards,Kaz

I'm trying to do some natting. My intention is to NAT a public address space (10.1.1.0 /25) subnet to a single address on my private network (192.168.1.10 /32).the intent is to get the servers in the private subnet (VLAN'd) to respond to ANY server ...

Hi, ASA 5520 with access-list on INSIDE Interface. There is trading application need by a user on LAN where ports are unknown and needs to be opened.How to identify the ports. On ACL inside if I add permit any any it works.All http traffic is not pas...

HelloI've upgraded my ASA 5510 to Version 8, and also the ASDM to 621. When I try to access via HTTPS I get "401 Unauthorized". The config looks fine, so I'm presuming it could be because IE7 possible. Any help would be great.Thanks