Network Security

I have an ACL with two entries, where if I enter "show access-list dmz_in", thoese entries don't have a "(htcnt=)", just the hex entry after. Other ACL lines have (htcnt=0) or (htcnt=12388), etc. Why would those entries not at least show a hit count ...

I am seeing a lot of drops on the interface connected to the inside network. The sh int command reveals a lot of "switch ingress policy drops". What causes it and can be it be fixed?The ASA 5505 is running ver 7.24rgds,

Friends, I'm having a seriou problema on ASDM. When I open ASDM, the Real Time Log Viewer pane opens and starts to show the events (logs). Suddenly, it stops. I thought that after some seconds it would refresh the events because the tool name is "REA...

Hi,I wanted to implement IDS/IPS and Application Inspection Firewall on my network. I already search some IOS with firewall feature sets and it requires a lot of memory. But I am not sure if a 7206 NPE200 router would fit to my requirements in terms ...

CLT inspect esmtp - default = enabled for 7.2 and 8.0Master Command Reference Document = disabled for 7.2 and 8.0Anyone in production that can verify which one is indeed correct.Jim Abercromby CCNP

How can I get Wifi users to get password notification from Active Directory using VPN connection?

i have two 5505 ASAs connecting back to a central 5520 ASA via the easy vpn remote option. Each of the 5505s are on their own networks. How do i get network connectivity between the two remote sites? Thanks in advance.

I would like to know how I can reduce the about of ping reply a ASA can reply. I have a ASA 5520 and need to only let 4 ping reply in.

We have our Primary site and Backup site connected through varoius routers and a PIx at each site. From our Backup Site we can connect to the two Physical host servers of the SQL CLuster, But are unable to connect to the Virtual Address. After doing ...

I have an ASA running 8.0(4). I am attempting to use an object-group to consolidate the incoming access-list as their are several servers behind the asa running web servers.However, when specifying any as the source network (I even tried using 0.0.0....

Hi;i've installed the SSL gateway with anyconnect client.Everythink is working fine, many times logged in and working, and after a few minutes the SSL gateway cannot be reached.No error page, anything, just loading gateway page without result.When I ...

No matter what I do I can't make outbound traceroute through my ASA 5500 work. I've followed Cisco's recommendations and those from fellow posters here for similarly reported problems, but still no luck. What I see is a request time out at each hop e...

Hello,We have a ASA5520 running asa804-28-k8 with 512mb of RAM. It uses about 300mb of memory constantly and I am wondering if thats OK or not.Also I read in this forum that disabling "Threat-Detection" will win back memory and does nothing to take a...

Hello,On our Ciso ASA we have the ASA-SSM-10 IPS module. It seem sto be in a state and the Cisco IPS Manager Express says it's not connected anymore. If I SSH/Telnet to it then I get the message:Error: Cannot communicate with mainApp (getVersion). Pl...