Network Security

I am upgrading from a 515E to and ASA 5510 and I have multiple VPN tunnels setup in the configuration. I don't have all the documentation on them, meaning all of of the keys. Does anyone know how to pull the current config with the keys unencrypted...

Can anyone explain why I have no problems with a VPN using this ACL:permit ip 172.18.85.0 0.0.0.255 10.11.0.0 0.0.0.255but this one:permit ip 172.18.85.0 0.0.0.255 10.11.0.0 0.0.7.255 doesn't work? I am only narrowing down the number of networks on t...

Router A has VPNs with two different remote sites but each remote site has overlapping subnets. Site B has subnets 10.11.0.0 / 16 and Site C has subnet 10.11.15.0 / 24. I tried tightening the ACLs and it caused problems with the VPN to Site B. The VP...

Hi all --A brief rundown of what I'm trying to do: An ASA 5505 without the security license sits in front of our office network. We have a block of five IPs from our ISP.We need to allow relatively liberal access from outside to one server via three...

I have a pix 501 (6.3(5)) that I need to be able to use to connect to remote vendors with. I also need to have the internal host on my side be nat'd to an address in my outside interface range so the vendors will connect to that device as the exter...

I just started receiving this message today whenever a user accesses the DHL website.199.41.238.32/0 --> 10.30.99.18/0 TCP <P>Microsoft Internet Explorer Method Parameter Validation Vulnerability</P>,NR-7427/0,Time:1229629119,Risk Rating:100,VLAN:0,A...

Hi,What will be the configurations needed to perform a intra-chassis active-active failover between 2 FWSMs, i have done defining the failover and state vlan on switch and also defined it in firewall vlan group.

I have our FWSM setup with the MSFC on the inside. I have an outside interface (0) and a inside interface (100). I need to add an additional interface for a internal department. I created a VLAN on the 6513 and presented it to the FWSM. I defined tha...

Folks, If the customer does not want to enable http or https on it's routers and switches, how can i manage them using CSM, What functionality will i loose if I only used SSH.Also what ports should I open of the devices are behing a firewall?

Hi folk, I have a PIX 525 firewall which is working completely weird. The device is running the PIX Appliance software 8.0(4) and the problem is that some hosts from the inside can reach a server in the DMZ and others can't despite the static NAT fro...

Hi, I am trying to prevent DDoS / SYN flood attacks on an ASA5505 (simplest version, DMZ restricted license). The ASA is in front of a Web server with approximately 2500 unique visits a day. only port 80 and 53tcp/udp are openOnce or twice a day I s...

I wonder if there is a normal situation.When I enter "show resource-mamangemnt" at FWSM, I got the following log: A-FWSM-Active# sh resource usage system counter all 0Resource Current Peak Limit Denied ContextTelnet ...

Greetings, We are using Anyconnect 2.3.0254 client + SBL/gina and are looking to customize the client even further to prevent user from Disconnecting from the VPN tunnel. Basically we have remote users that come in on EVDO using Verizon VZaccess Man...

I have an AIP-SSM on a 5510. I'd like to pull events via SDEE. How do I go about setting this up? I have read some docs to just add host to the allowed hosts list, and setup a readonly account.