Network Security

HJi,<br />I've a Cisco ASA with software 8.0(3).<br />I've PC behind ASA (say for example 254 hosts on interface inside); I want to do global nat on interface outside with two adddresses (say for example 100.100.100.100 and 100.100.100.101).<br />The...

hello,i have Two ASA 5540 and because of some problems in the network diagram, i can't configure them as Active/Active or Active/Standby so, i want to make redundancy between them. does ASA 5540 support HSRP?

I am doing a source address nat in FWSM with the following. But sniffing the packet outside FWSM, I don't see the source IP being NAT'ed. Commandstatic (DMZ2,DMZ3) 10.1.1.5.0 192.168.50.0 netmask 255.255.255.0DMZ2 is where the traffic is originated a...

HiI have a requirement to dynamically learn routes on one side of a firewall pair and send them to the inside. I have suggested running one OSPF process on the outside and redistribute specific routes into another ospf process on the inside. The fi...

Hi folks,<br />I got curious after enabling and loading IPS signatures into our routers. I used the latest IOS-S376-CLI.pkg file to load basic signatures set. Now then I have signature definitions files in the routers flash in xml format. <br />How a...

We have upgraded pix 535 from 6.3 to 7.2 after which we are seeing high CPU utiliztion, system has 1Gb of RAM. If we verify in the pix it says more of the process is taken by "Dispatch Unit". pls can some help on this.--srini

I am getting the following message in PIX-515 log file:[ Scanning] drop rate-1 exceeded. Current burst rate is 10 per second, max configured rate is 10; Current average rate is 2 per second, max configured rate is 5; Cumulative total count is 1283Pix...

I am going to test the ASA performance to see how much heavy load it can handle especially for vpn traffic. The only command I knew areshow cpushow memoryIs any other command I can use to check the performance? Also, what's the recommend threshold fo...

We have established an MPLS connectivity towards the remote client end. All users in the LAN are able to access the remote end servers through PAT over the MPLS circuitnat (inside) 10 access-list mpls_trafficglobal (MPLS) 10 interfaceThe problem is t...

ASA5510 with ASA-SSM-10ASA 8.0(4), ASDM 6.1(5)51IPS 6.2(1)E3, IDM 6.2(1)some "cosmetic" problems, but they do confuse the operators:1.neither ASDM nor IDM reports on the "Licensing" gadet the correct "Auto update" status. It is reporting "Not checked...

Have any of you ever used TPM to secure a VPN connection into a corporate network? I'm interested in doing two factor authentication. Ideally, only laptops that I authorize will have access to the VPN tunnel. If the laptop were to be lost or stole...

Which device should I buy for a small Mac network?I will have one Mac getting data from a VPN, and another Mac accepting a forwarded 80 port answering the browsing clients. I have to control the whole system remotely, probably by a forwarded port 590...

Hello folks,I am trying to block messenger using Zone-based Policy for certain users from the local network. This is still lab environment recreation for a customer. It does not seem to work and I am not sure this is the right way of doing this in th...