Network Security

Hi everyoneWe're noticing under stress testing that our ASA5520 is maxing its CPU out at about 3900 TCP connections per second. This is way lower than what Cisco quotes, and our rule set is quite small (a few dozen rules).Is this normal? We are using...

Folks, I have a question regarding FWSM failover. I was reading the documentation and it said that hellos are sent out over the failover link as well as all the interfaces. If any of the interfaces goes down the firewall is declaired down???wha...

I have asa 5540,four interfaces inside,outside,intranet,dmz,inside.i have my antivirus and domain controller dns server is in inside zone ip 192.168.x.x and some my web servers is in dmz zone ip 192.168.y.y,now i want to insatll antivirus trend micro...

I have a FWSM that seperates various segments on the network. For some reason at times connectivity to some hosts stops without any indication why.I had done some checking and discovered that there seems to be a corrupt XLATE created at times, which ...

I have a cisco ASA 5540 firewall with a DMZ segment, Inside segment & outside (Internet segment). The web server with website domain www.mysite.com is in DMZ segment NATted with public IP on Internet segment.I have allowed full internet access to a m...

Folks, I am confussed about the failover process on 6500. The doc says that if the firewall does not receive hello on failover link, it does network activity test on the interfaces. My question is what if the interfaces have gone down on a fir...

Please identify the difference between the base license and the Security bundle. I'm confused on the number of interfaces and VLAN's supported on the two bundles. The sales documentation I look at indicates that the base bundle supports 5 FE and the...

Hello,Currently I have an ASA5510 which is doing LDAP authentication for remote access VPN users.The authenticating server is locally on a port on the ASA.I would like to have a backup, but the server is currently at a remote office, but that office ...

"Inbound TCP connection denied from 1.4.19.244/1635 to 1.4.20.212/4001 flags SYN on interface inside"The vlan on the inside interface (vlan19) also needs access to systems on vlan20 so we have a static route on the asa that points to a router that a...

Hi...I am new in security.Sorry for stupid quest.Pl find the attachment for pix and router config.Problem is that i am not able ping router to pix and vice-versa.thanx....

I have a client that has an ASA that has routes to remote locations that point to another firewall on the LAN. So the clients default to the ASA and then the ASA should route traffic for the remote locations to the other firewall.This creates the hai...

what is the command to tftp the ASDM file to my pix 501 6.3. the command I'm using comes up invalid. I'm using the following commandcopy tftp://10.224.x.x /c:\tftp flash:file name

hello,i want to share file between dmz and inside.for this can i give route in ASA 5540.

I'm trying to permit tracetoute (from an internal server) through my ASA to any host on the outside. So far I can only find information relating to traceroute to show the ASA...policy-map global_defaultclass class-defaultset connection decrement-ttl...