Network Security

All, I am seeing quite a few of the following denied message logs: Deny udp src inside:10.1.2.166/137 dst outside:169.254.196.189/137 by access-group "inside_access_in" 169.254.196.189 is a well known address. Why would a machine be trying to send to...

Hi, I have a asa 5500 connected to 3 zones, 1. User access zone, 2. server access zone and 3 the internet zone. Now i need to permit sctp traffic with port 7777 etc... between user access zone to server access zone. The customer doesnot want any ...

Hi all,Currently i am running a Cisco ASA v8.0 IOS w/ UR license.I have a web server running behind the ASA (In the DMZ network) and an inside network (with access to the internet).I do run a host -monitoring software which polls the corporate websit...

Hi every one,we have two FWSM in our 6509 switches,fwsm's are in multiple context mode and are configured for active/active.we have two context= admin and public.here is detail:FWSM-1=admin(active) public(standby)FWSM-2=admin(standby) public(active)s...

Hi,Recently a audit point was raised by auditor, that the failover key is not enabled for the failover(PIX 515).Please let me know how to enable the failover key between the PIX firewall without any downtime.

Hi...I have a 7206 VXR router with advanced ip services image connected via its gig ethernet port to the ASA's outside interface. I can telnet from any pc behind the ASA to any serial interface on the 7206, but I cannot telnet to the gig ethernet in...

Hi, I'd like to upgrade a 525 from 6.3 to 7.0 and but I'm not sure if upgrade in monitor mode is required. The upgrade doc talks about monitor mode for 515 and 535, but it's better to verifythanks

It seems that I can use the default route for both inside and outside network reachability.route inside 0 0 10.x.x.xroute outside 0 0 32.x.x.xIs this the case?

Hi,We have an ASA with the IPS module, how can I ignore signature ID 6402 completely?

I have Cisco ASDM image 6.13 in my ASA 5520 ver.8.0(3). I was able to launch since the day it was installed, but for the past 3 weeks, I see the process bar going & there finally stuck. No error message, i have the proper Java version installed, whic...

Hi,In ASA and Cisco Router i already open the port for the SFTP which is port 22, but user unable authenticate the SFTP service.Is it the port i opened incorrect?pls advisethks -gilbert

Hi With ASA failover in transparent mode, I don't see the mac-address-table replicated from the primary to secondary unit. Any comments...With regardsKings