Network Security

we are currently using an FWSM over 6509 as firewall for our various services.In the process of studying if it needs to be replaced in by a more complete firewall rather than using a module.Is ASA 5520 better than FWSM module. If yes, please suggest ...

I am running a asa5550 version 8.2(1) OS and 6.2(1) asdm. The asa was in a single context, I change to two separate contexts now my vpn configuration does not show up in asdm. The commands still show up in the OS.

I have a firewall that will be connected to ADSL Internet Line directly, to Cisco Router with Internet Lease Line for the Exchange Server, and the last interface to the Inside network. So the question is how i am going to configure the users to use t...

All, I am seeing quite a few of the following denied message logs: Deny udp src inside:10.1.2.166/137 dst outside:169.254.196.189/137 by access-group "inside_access_in" 169.254.196.189 is a well known address. Why would a machine be trying to send to...

Hi, I have a asa 5500 connected to 3 zones, 1. User access zone, 2. server access zone and 3 the internet zone. Now i need to permit sctp traffic with port 7777 etc... between user access zone to server access zone. The customer doesnot want any ip-i...

Hi all,Currently i am running a Cisco ASA v8.0 IOS w/ UR license.I have a web server running behind the ASA (In the DMZ network) and an inside network (with access to the internet).I do run a host -monitoring software which polls the corporate websit...

Hi every one,we have two FWSM in our 6509 switches,fwsm's are in multiple context mode and are configured for active/active.we have two context= admin and public.here is detail:FWSM-1=admin(active) public(standby)FWSM-2=admin(standby) public(active)s...

Hi,Recently a audit point was raised by auditor, that the failover key is not enabled for the failover(PIX 515).Please let me know how to enable the failover key between the PIX firewall without any downtime.

Hi...I have a 7206 VXR router with advanced ip services image connected via its gig ethernet port to the ASA's outside interface. I can telnet from any pc behind the ASA to any serial interface on the 7206, but I cannot telnet to the gig ethernet int...

Hi, I'd like to upgrade a 525 from 6.3 to 7.0 and but I'm not sure if upgrade in monitor mode is required. The upgrade doc talks about monitor mode for 515 and 535, but it's better to verifythanks

It seems that I can use the default route for both inside and outside network reachability.route inside 0 0 10.x.x.xroute outside 0 0 32.x.x.xIs this the case?

Hi,We have an ASA with the IPS module, how can I ignore signature ID 6402 completely?