Network Security

I am trying to configure Zone-Based Firewall int an 1841 routes with 15.0(1)M Advanced Security IOS.I can't seem to configure match protocol esmtp in an inspect class-map.However,the Zone-based firewall design guide document states that esmtp is supo...

Dear friends,I have configure ip sla monitor for redundant ISP links on the ASA. The ASA version is 8.2(1).I configured as per the linkhttp://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a00806e880b.shtmlI tested ...

6.0(3)E1 patch applied successfully to our non-production IDS-4215. Applying the patch to our production IDS-4235 causes it to boot directly to grub> command prompt. It appears the system files are there. What command do I need to issue for grub t...

I have a ASA with two ISP (ADSL  and SHDSL) connections. I want to use ADSL for browsing and SHDSL for the services I provide to Internet (VPN, Web Server, Mail, ...). I have to define a default route next hop for browsing to the ADSL router, I defin...

Hi All,I have two Cisco ASA 5520 firewalls (Active/Standby) running with software version 8.0.4.32 version and ASDM version 6.0(3).I have encountered a problem while changing configuration using ASDM. The screenshot of the error has been attached.So,...

Hi gurus,I know that Cisco ships the security server (CSM) with a standalone version of CSA Agent. Is there any way to download this agent without deploying CSA MC server? I need to do the internal posture validation with Ciscosecure ACS server and c...

I created a rule in CSA 6.0 that, by default, blocks any application on any machine being connected as a server.  On a DC we made an exception for the server to be connected on UDP 53 for DNS.  However, we are seeing the following messages below.  Th...

Hi, searching hi & low, regarding intermittent disconnects for RDP sessions.Am interested in any pointers.Situation is following: Multiple RDP servers behind ASA, sometimes a user, and sometimes all users to one server from outside our ASA suffer int...

HiHow can I see the transactions between two hosts that are trying to talk to each other over certain ports .I am trying to find out ports needed to be opened for successful connection .I have tried "sh log" but I do not see those two hosts..The foll...

I have setup the ASA5510-SEC with the CSC-SSM and it is working great. What I need isto be able to provide, for the client, reports of how much time particular users spend on theInternet, where they go on the Internet etc. Do I need more product to d...

Hi, need to setup syslog server that will receive logs from an ASA firewall. Firewall has multi contexts and wondering how the syslog should be setup in this case? One syslog config for all context (from admin context) or individual syslog setups fro...

Hello folks, I am new to syslog so I want to confirm the following:Currently I have the below configured on MY4507:Question:Imagine I create an ACL "permit tcp any any eq 80 log-input" and apply to one of the inbound interfaces so that I can monitor ...

Hi, imagine I just want to find out which IP addresses are using trying to hit my server network on port 80.If my syslog server is limited in storage, I am wondering whether I could just log the first packet from a given source and target IP address....

W are running an ASA 5540 failover pair with SSM-40 modules.  When using the IME version 7.0.2 to manage the IPS we have not been successful in getting anything to work but "Deny Attacker Inline."  Nothing else works.  We have tried every option unde...