Network Security

In my ASA 8.2.1 ASDM 6.2.1 i see the hitcount for a "deny any any log" log increasing but i can not get the corresponding log entrys. Even marking the ACE and "show log" does not output a single line. Getting the denied packet was only possible using...

I have to implement a Site to Site tunnel with one of our client they have provided me there vpn router ip with configurations and have asked me to connect the vpn using a particular private ip 172.16.16.1, where as my local LAN IP is 192.168.1.0/24....

We have a L3 OOB, workstations are using the CA Agent, both XP and Vista machines. After login the CA Agent keeps looping, refreshing ip successful, the switchport never changes from the untrusted Authentication VLAN to the Access VLAN, the workstati...

Hello there! I'm stuck and need your help please. I have installed NAC Server (ver 4.5(1). I'm deploying OOB VG. I've connected both CAS and CAM on a 6506 Cisco switch. My problem is that i can reach the CAM but cant reach the CAS.Below are some conf...

I have ZVRS Z-340 I am trying to connect to an outside server. I have the policy outbound for the ports the phone needs. If SIP is inspected on the ASA is their anything else I need to enable for STUN?Below are the ports the Vid phone requires outbou...

Hello I want to set up the Above Network to let the outside user connect to the corporate network using VPN client software when they are abroad. Question is, where should I terminate the VPN connection? It's on the internet router or on the ASA? Any...

I have an ASA 5540, running 8.0 software.Interface "IN" (security level 100) has subnet 192.168.1.0/27 directly connectedInterface "OUT" (security level 100) has a route to 192.168.0.0/16.Interface VPN (Security level 50) is for VPN clients to connec...

Hi,I have ASA 5505 firewall. After powering up the device LED's are flashing and going off. What I have to do with this firewall?RegardsSKR

Hi,I am using ASA 5540 and trying to implement LAN Based Active/Standby Failover using Management Interface. It seems that failover is possible but not the Stateful failover. Can anybody confirm me... about it that using Mngt interface I can not do S...

I'm using the ASA for anyconnect users and I keep seeing log messages similar to the following:4 date=Oct 07 2009 Source IP=10.1.1.201 Source Port=17571 Destination IP=10.0.250.18 Destination Port53887 Duplicate TCP SYN from inside:10.1.1.201/17571 t...

I'm getting syslog messages from IOS 12.4(9)T3 that I can't figure out what to do with, e.g.: %FW-4-TCP_OoO_SEG: Dropping TCP Segment: seq:1102628888 576 bytes is out-of-order; expected seq:1102605840. Reason: TCP reassembly queue overflowI've searc...

I have this problem that I am hoping someone can help me with:Pix 515 (R) with 64M RAM and 16MF running 7.2(3). I have outside and inside interface.Configuration is very simple I have a Linux host behind inside interface with an IP address of 192.16...

I have an odd problem I am hoping someone can help me with.I have a Pix 515 firewall Restricted with 16MB Flash and 64MB RAM. Whenever I tried to boot it with version 7.0.8 or 8.0.4, the firewall stays up for about 5 minutes and then it reboot itsel...

Hello everyone !I have 2 Pix 515 here in production, each one for an internet line.For six month , i have serious trouble with the one connected to the bussyiest one : every 1-2 weeks it reloads itself most often at the worst moment, where hundreds o...