Network Security

My 6500 with my IDSM2 is connected to my Internet router so all traffic to and from the Internet passes through to the hosts at the access layer (obviously). I constantly see ICMP Unreachable traffic crossing the IDSM2 from various foreign countries...

Just a quick question. As far as PIX and ASA technology, is there a reason why you cannot ping test the outside/public ASA with packet sizes over 1000 or 1500 bytes?Yes, all ICMP echos and relpy commands are present and you can ping and get replys us...

Hi,I have a problem to get the ASDM running on an ASA 5510. Sofware is asa804-k8.bin, ASDM is asdm-613.bin. Was also trying with asdm-615.bin but the same problem. On a previous version the ASDM was working fine (asa723-k8.bin and asdm-523.bin). I...

Hi all,I have been thrust into supporting a PIX running version 6.3 which has just been given a new internet link on its outside interface. They now have problems with speed to the Internet and trouble sending large attachments or files outside. I ha...

Hi ExpertsWhat does the following mean from an output of a show crypto ipsec sa?#send errors 118793, #recv errors 0 local crypto endpt.: 202.1.56.226, remote crypto endpt.: 165.228.225.105 path mtu 1500, ipsec overhead 56,

Hi, I wanted to ask if someone has worked on ISS (IBM based IPS). I need to compare it with Cisco IPS. Regards, Asim

How and where do you configure the time settings in the GUI?

Rather then specifying SSH subnets for device administration, is it possible to use certificates instead?

So in access lists on a pix you can specify a port number or port name. If you do specify a number which has an associated name like 80 for www, then when you do a show run you see the name and not the number. Is there any way to turn off this autom...

I have a problem, when I try to create a VPN tunnel between Cisco ASA and SonicWall 4006. In Phase I, the tunnel is active, but when the ASA can't build the ipsec key and the phase II fails.Phase I1 IKE Peer: 200.30.146.8 Type : L2L ...

We have a remote office (ASA5505) connected to main office (3025). We can browse networks and access services on either side OK, but our exchange server host name also has the same public DNS host name so mail clients at the remote site try to connec...