Network Security

Hi all,I have 2 ASA 5510 running 8.04 in a cluster. I am looking to upgrade the software and saw the 8.05 just released.Would anyone care to elaborate as to what the major difference between the 2 upgrades are and why I should go with one over the o...

We have activated ssl vpn on our vpn concentrator 3000 running with 4.72 version .The configuration has been done as described in the cisco website, however we are facing the following problems.... ON THE VPN CLIENT : Here we see that the client thro...

I've run into a major issue and I feel that I'm stuck and this just cannot be done...Here is the situation.I installed Windows 7 on my laptop, and installed the latest version of the Cisco VPN client 5.0.06.0110When I connect to work, I get the error...

Hi there,I'm trying to troubleshoot some traffic traversing one of my firewalls and I was hoping someone could help me. I have a TCP datastream that runs around 3Mbps and when I compare packet traces from before the firewall to after the firewall, I'...

I configured identity static NAT on my ASA specifying a range I.E. "static (inside,outside) 10.10.10.0 10.10.10.0 netmask 255.255.255.0 and now the outside users cannot connect to inside WEB server which has IP address of 10.10.10.51. Do I need to cr...

Hello1) What's the difference between promiscuous mode and inline pair pair?2) Where the necessary use of each mode?3) if I have I-BANKING server located in the DMZ network, so what mode should be prefer4)after the preferred mode then do I need to as...

Hello,I have Cisco6513 with one IDSM-2 slot.I faced the following issue:Suddenly traffic over the network became very very slow. I troubleshoot the issue so I found that IPS1 LOAD reached 100%. So via CLI, I did the IPS1 in BYPASS mode ON. Then traff...

2193 11/05/2009 14:17:58.610 SEV=4 AUTH/15 RPT=170 Server name = hbmaindc01, type = LDAPAUTHOR,group = none (global server), status = Not-in-service 2195 11/05/2009 14:17:58.610 SEV=4 AUTH/88 RPT=41 Authorization failed: Reason = Network errorhandle ...

Dear ALL,Issue: IDSM is showing 100% Inspection(Sensor) Load during certain periods daily which causes more than 2000 ms delay in the network.This issue occurs after upgrading the signature engine to E3We have also monitored the traffic during 100% L...

Dear Experts!We have several AIP-SSM-20s on the ASA and one of the AIP-SSM-20 has seen high cpu status one hours ago and it still going on.another AIP-SSM-20 has 2~20% cpu load.Is this normal status? Do you have same experience?I have one more quest...

Hello... here is the question...Based on the following configuration which option is correct?class-map type inspect match-all myprotocols match protocol httpmatch protocol dnspolicy-map type inspect myfwpolicy class type inspect myprotocols inspectzo...

Hello,I have a bunch of IPS which are not synced anymore with the ntp server( Core switch) sicne the time on that core switch has been modified.I there a way to force ntp sync on the IPS without having to reload the IPS

Hi Gentlemen,I m new to ASA FW. I just tried to configure the ASA FW by using the ASDM. But I cannot lauch the ASDM login page.I did the following procedure b4 login to ASDM page https://192.168.1.1/admin ( 1 ) ciscoasa# dirDirectory of disk0:/61 -rw...

I have a new laptop, Lenovo T400 with Vista Business ed, SP1 installed. ASDM will not run on this laptop: Every time it just dies/disappears right after I log in. I tried different versions ASDM, different ASAs. I knew from earlier experience that th...

Hi guys,I'm seeing something strange on my ASA log :Dropping TCP packet from dmz:10.x.x.x/23 to inside:10.x.x.x/45762, reason: MSS exceeded, MSS 536, data 556536 ?? Am i reading well ?When i do sh run sysopt :no sysopt connection timewaitsysopt conne...