Network Security

Dear All,I know that the asr-group command permit to a couple of interfaces (belonging to the same group) to re-route a return packet for a connection thatoriginated through its peer unit.But the asr works also for the new connections?If a new connec...

Anyone ever experienced an issue where your Sophos appliance that sits behind the ASA firewall cannot make a TLS connection outbound due to the ESMTP inspect option?I don't want to disable it entirely. Is there a way to create a policy map to disabl...

Hi Guys, I have pix firewall 525 with software V 6.3. In that pix firewall, i can able to access the one of the dmz server using both nated ip( let say 10.80.80.2) and the original DMZ IP (let say 172.80.1.2). Recently i tried to upgrade to ...

Is there any CSA compatible with MsWindows 2008We need this version of CSA.

Hi All, I have SSM 10 with ASA 5510. in ASA, I've configured NTP server and it shows correct time. In IPS, I didn't configure NTP server because I assume it gets the time from ASA, and there is no summer time enable in SSM. But it shows one hour off ...

I am contemplating deploying two ISR routers as zone based firewalls. They would have possibly up to four zones on them. I have both 2811s and 3845s and would prefer to use the 2811s as the 3845s have already been ear marked. Does anyone know what ty...

Hi All, we have a 7609 chassis where we have installed the FWSM module and IPsec VPN module.we would like to configure a Site to Site VPN. how do we do that now ? Below is the VLAN interface configuration (outside)on the fwsminterface Vlan601 descri...

Trying to re-image a CSC-SSM module but the recover boot procedure seems to be looping.I configure then start the "hw mod 1 recover boot"...thmasa1f# hw m 1 recover bootThe module in slot 1 will be recovered. This mayerase all configuration and all ...

I have an ASA 5505 that will not respond to a second public address that was acquired. However this address is within a different subnet.(not actual public addresses)Interface IP: 10.10.2.2New IP: 10.10.5.2Translations using the Interface IP work wit...

We have two ASA 5510 firewalls with a tunnel between two sites. The tunnel works without issue until one of the sites experiences a brief outage due to the service provider. The VPN tunnel is not automatically establishing after the outage. It takes ...

Does anyone know the ports which need to be open for a "ipsec-isakmp" vpn tunnel?

I work at a company and manage a couple firewalls that do not log everything. I inherited these firewalls from somebody else already configured. For some reason, they were configured not to log these messages :no logging message 106015no logging me...