Network Security

We have Primary PIX515 with Unrestricted License and Standby PIX515 with just Failover license in Active / Standby mode.A few days ago the Failover unit failed hardware wise.We raised an RMA and got a spare from Cisco which happen to come with with c...

Hi Team,We have fwsms in cluster mode, when we configure a new acl and press enter the cpu goes high and comes down during day time (peak hrs). When we do the same during off peak hrs no problem. FWSM Firewall Version 2.3(2)5.FWSM has fairly good amo...

Hi guys,I enabled Unicast RPF to protect my network of malicious traffic. How you can see on output of command "show ip verify statistics", show dropped packets on output interface and I would like to investigat to determine their source and whether ...

Hi,I am trying to setup a l2l VPN between an ASA 5510 (os is 8.0(4)) and a PIX 515E.Then vpn fails with the following messages :ASA (initiator): ASA(config)# Aug 26 11:56:54 [IKEv1]: Group = x.x.x.x, IP = x.x.x.x, construct_ipsec_delete(): No SPI to ...

Hi,We have a IDSM-2 system card in 6500 system. Unfortunately, we lost tracking the login/password. I have read Cisco doc# 13837. It req to know either admin username/password or service username/password to do password recovery. I do not have those ...

Hello.I have a dedicated fibre connection between 2 of our primary sites with direct routing between the firewalls at the edge of each site.Each site also has an ADSL connection for emergency internet, which I have connected to the firewalls with a f...

I am trying to establish a L2L VPN connection between a Cisco877 (spoke) and a Fortinet firewall (hub). The attached files show Cisco 877 current configuration and the result from a debug generated when I ran a test VPN with SDM application.My first ...

Hi-I've got a setup where for our outgoing internet connections, all users are PAT'd to 1 outside address. I've got a connection that needs to have multiple people use it, and the requirements from the vendor are that the clients need to have indivi...

I've inherited a DMZ network that doesn't follow good security principles. Some hosts in the DMZ are dual-homed and the 2nd network connection is directly on the internal network:Internal --- ASA ----- Internal Network | | L-----------DMZ(...

I need urgent or assistance with the above device. If you're welling to assist drop me a line troy336@yahoo.com

I am trying to ping the internal IP of ASA from an outside IP, and the ping results shows request time out. Where I have permissioned ICMP on internal interface in ASAI have also attached the configs ,