Network Security

I have a 4240 inline between an ASA and a Switch, and am experiencing errors on the switch indicating receive discards.The devices are directly connected like this, ASA --- IPS --- SWITCH. The ASA and Switch have the speed/duplex fixed to 100/Full, ...

I have an ASA 5510 and was considering putting my organization's database servers on their own interface. The reason I want to do this is to examine all traffic with my IPS sensor to/from my databases. Is it a "best practice" to do this? TIA

We have a PIX515. On the inside is a mail server and clients. We have a dynamic NAT to the outside address overloaded by a static on port 25 for inbound mail. On the DMZ is a Web server that has a dynamic NAT to the same outside address plus overload...

Hi experts,Is it possible to create loopback interfaces in FWSM or ASA firewallThe need is i want a interface command to the firewall as I am facing problem in pinging one interface IP ADDRESS from the other zones.Thanks in advancesairam

Can any explain mne please, whey having this config:global (outside-Baku) 1 interfaceglobal (outside-Ganja) 2 interfaceglobal (remote-access) 3 interfacenat (remote-access) 3 access-list nat-vpn-internetnat (inside-Bct) 2 access-list nat-ganjanat (in...

Hi all,I am required to setup a private CS game server behind a cisco 877 router. I've set up the router to accept PPTP VPN connections (least overhead) and things seem to work fine apart from the fact that I cannot seem to be able to forward UDP bro...

Hi, only for testing purpose, we need to enable remote-access for a client on inside lan, toward inside ASA IP interface.Traffic should be encrypted to the inside ASA IP and should come out decrypted from the same interface.How to ? (same-security-tr...

Does anyone know if the ASA will need to be rebooted after the new license key for the botnet filter is installed?

HelloI want to setup a L2L-tunnel to a third party. Because of their and our requirements I want to do NAT of both our addresses and theirs in our end. Is that possible?I'll explain further in attached topology. I have local clients addressed 172.30....

How i can resolve this issue

Hi,I'm using a 5510 with sw 8.2(1) and sec plus license. Normally that should give me eth0/0 and eth0/1 as gigabit interfaces.Unfortunatly it doesn't. I looked in the bug toolkit, but there is nog bug reported. Did someone saw this issue before with ...

I have one PIX515E, it gives this message. Everytime i reload it, it start booting again and again, Then i use Monitor> and i load pix721.bin and i work,ystem image file is "Unknown, monitor mode tftp booted image"Config file at boot was "startup-con...

Dear ALL,i am tying to ping a public ip address from a remote site router but the packet is being denied.Split tunneling is configured on the central site asa so the remote sites can have access to internet through the asa.Here is a copy of the asa ...