Network Security

Hi there,I'm trying to troubleshoot some traffic traversing one of my firewalls and I was hoping someone could help me. I have a TCP datastream that runs around 3Mbps and when I compare packet traces from before the firewall to after the firewall, I'...

I configured identity static NAT on my ASA specifying a range I.E. "static (inside,outside) 10.10.10.0 10.10.10.0 netmask 255.255.255.0 and now the outside users cannot connect to inside WEB server which has IP address of 10.10.10.51. Do I need to cr...

Hello1) What's the difference between promiscuous mode and inline pair pair?2) Where the necessary use of each mode?3) if I have I-BANKING server located in the DMZ network, so what mode should be prefer4)after the preferred mode then do I need to as...

Hello,I have Cisco6513 with one IDSM-2 slot.I faced the following issue:Suddenly traffic over the network became very very slow. I troubleshoot the issue so I found that IPS1 LOAD reached 100%. So via CLI, I did the IPS1 in BYPASS mode ON. Then traff...

2193 11/05/2009 14:17:58.610 SEV=4 AUTH/15 RPT=170 Server name = hbmaindc01, type = LDAPAUTHOR,group = none (global server), status = Not-in-service 2195 11/05/2009 14:17:58.610 SEV=4 AUTH/88 RPT=41 Authorization failed: Reason = Network errorhandle ...

Dear ALL,Issue: IDSM is showing 100% Inspection(Sensor) Load during certain periods daily which causes more than 2000 ms delay in the network.This issue occurs after upgrading the signature engine to E3We have also monitored the traffic during 100% L...

Dear Experts!We have several AIP-SSM-20s on the ASA and one of the AIP-SSM-20 has seen high cpu status one hours ago and it still going on.another AIP-SSM-20 has 2~20% cpu load.Is this normal status? Do you have same experience?I have one more questi...

Hello... here is the question...Based on the following configuration which option is correct?class-map type inspect match-all myprotocols match protocol httpmatch protocol dnspolicy-map type inspect myfwpolicy class type inspect myprotocols inspectzo...

Hello,I have a bunch of IPS which are not synced anymore with the ntp server( Core switch) sicne the time on that core switch has been modified.I there a way to force ntp sync on the IPS without having to reload the IPS

Hi Gentlemen,I m new to ASA FW. I just tried to configure the ASA FW by using the ASDM. But I cannot lauch the ASDM login page.I did the following procedure b4 login to ASDM page https://192.168.1.1/admin ( 1 ) ciscoasa# dirDirectory of disk0:/61 -rw...

I have a new laptop, Lenovo T400 with Vista Business ed, SP1 installed. ASDM will not run on this laptop: Every time it just dies/disappears right after I log in. I tried different versions ASDM, different ASAs. I knew from earlier experience that th...

I found the other night that on an ASA I was working with I could type login while in unprivileged mode and re-enter the same credentials I had just entered to login to the box (via SSH) to get myself into enable mode without ever having typed the wo...

I can't find direct answer on my search, is there anyone know which OID able to poll SSL users/Sessions from ASA 5540. I did google for last 3 days none of the OID I got not working. I am able to poll IPSec session though.Thanks

i have ASA 8.0 with static ip address and remote site has a ADSL ROuter with dynamic IP address.I am not able to make the Site to site vpn connection. I have tried dynamic map and standard site to site vpnconnection but nothing is working for me.Plea...

While using ASDM 5.2 for our PIX's and FWSM, I noticed that within the Access Rules, under Security Policy, right clicking on the Access Rule brought up the option to 'Show Log'. The pop up description of this function says "Show logs generated by th...