Network Security

Is the Cisco ASA generally considered a screening firewall or a proxy based application firewall (http://en.wikipedia.org/wiki/Application_layer_firewall)?Thanks,Jack

Dear all,I found one of my servers from Inside network built a lot of connections with unknown outside hosts. From the that server, I saw the server itself keeps setting up TCP connection to outside host and the destination port is 445. I think the s...

All,I have a need to create a vpn tunnel with a vendor. They want me to pass my actual public address through the tunnel because they don't allow private addressing over their tunnels. I don't have nat configured on my ASA now as it is. How would I e...

Dual firewalls, is the overhead and extra resources really worth it?How common is it?

Dear all, My ASA version as followinf:Cisco Adaptive Security Appliance Software Version 7.2(2) Device Manager Version 5.2(2)So, if you please, can you tell me what is the latest ASA version?And how i can get this version?And what is its size on the ...

ASA 5540 high memory utilizationits stuck at 79% no major changes done to the config

Have had SSH set up on PIX (6.3) for years now with no issues, but suddenly it seems to intermittently (more often than not) not allow connections until I change the IP address of my PC

Hi, i am running a network having 30 IPS (which indcludes SSM20s, IDSMs and IPS 44XX).i dont have mars device. Is there any way to retrieve events from all the IPS to one central location using csmanager ??or is there any freeware that can do the job...

hi friends,i am facing one issue on ports accessing i installed one software for all users in that software they are using 5721 port to access , the application is accessing through web. the main host is in uk but users are in uae .but if i try to te...

I have a client that is claiming when he removed an IPS service policy that was applied to the inside and outside interface (using separate service policys), he lost his connection to the ASA. The client has a pair of ASA's in active/standby, so I wa...

Hi,I'm trying to do the NATing for VPN client pool as inside servers are accepting only some allowed ip subnet.My vpn client pool is using 172.16.1.x/24 and inside users are allow to access only from 141.146.130.x/28 as source subnet.For that I did t...

We purchased CSA-START-6.0-K9. We did not install anything yet. Now we want to use agent 6.0.1, not just 6.0. I believe there are two possible scenarios:1. Install 6.0 and then upgrade it to 6.0.1. In such a case, will the upgrade use the same old li...

Hi!.We have this error message since Signature update 422 when we try to update from ftp local server with command:ftp://anonymous@192.168.1.125/IPS-sig-S423-req-E3.pkgFTP server is from Windows XP IIS, and worked fine from signatura version 407 to s...