Network Security

i have an asa 5505 guarding a single web server. it is running dns. ports 80tcp and 53udp/tcp are opened.the problem is that every once and a while my server sends out a large amount of DNS replies causing it to go over 10000 conn limit (replies to i...

I have just run in to this ridiculous ASA bug where ASDM stops working if uptime is over 1 year.http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method=fetchBugDetails&bugId=CSCsr89144Could someone please tell me if CSCsr89144 is fix...

hello,i want to know about natting applying from dmz to intranet for security leve is 50 and 90 respectively.now how i can do natting of this condition.

I have a ASA5510 which should have 4 10/100 ports and a 10/100 management port. I am unable to access or configure e0/3. Is this a limitation of the Base license? Or a limitation of 7.0(8)???Here is the sh ver... it doesn't make much sense interms of...

When upgrading the ASA and ASDM image on a failover pair do you only need to change the boot system image and asdm image path on one device or both?Are there any tips to bear in mind when attempting this?

I have been trying to find a solution to the following scenario for some time but with no luck.Is there a way I can restrict the Cisco ASA or Concentrator to only accept client connections where the used certificate key usage is Non-Repudiation (or a...

Here is my configuration.access-list inside_access_in extended permit tcp host Mailint any eq smtpaccess-list inside_access_in extended deny tcp any any eq smtp access-list inside_access_in extended permit ip object-group internal-net any access-grou...

Problem statement:SSL VPN Client (AnyConnect)SSL VPN users are authenticated using the local user database stored in the Cisco ASA.SSL VPN is also sharing the same local user database with ASDMProblem lies where by the ASDM administrator (Privilege 1...

I have an ASA 5510 in our primary location with all inbound / outbound traffic directed through it to our primary ISP. I now have 5 systems in a remote datacenter behind a 2nd ASA 5510 and a 2nd WAN link from a 2nd ISP (the data center). I want to us...

I have Netflow enabled and collecting data on my 5510. My problem is that the interface on the ASA is 100Mbps, and my internect connection is only 4Mpbs. My netflow data show all traffic at 1% or less because of this. Is there a way to fake the ASA i...

I have a remote access vpn setup on a 2801 router (384Mb DRAM, 64Mb Flash) which works fine using IOS c2801-advsecurityk9-mz.124-25a.bin. I have try to upgrade to a .T IOS so I can setup the Browser Proxy Settings options. But whe I upgrade I get ver...

Hello, I have configured the tunnel between router-ASA. The tunnel is up but there is no reachability means, Not able to ping remote LAN IP.1) At Router end, I am able view the encap packet,but No DECAP packets under "sh cry ipsec sa"(other tunnel ar...

Hi all. I have implemented ssl vpn on my asa5510. However it seem to support only 2 concurrent sessions. If i use the same userid for more than 2 concurrent sessions my login would fail. Is there any way to increase the concurren session limit? Thks ...

ssh was working perfectly for one year on ASA 5510 (ASA 8.12) until it was recently upgraded to ASA 8.21. When i try to connect via putty, i get'Network error: Software caused connection abort'I regenerated RSA key to no avail. Please advise. thanks

Hi,we have this module on an ASA 5540, while the inspection load is reaching a max of 35% , the cpu is reaching 100% sometimes.1- how do i check the current bandwidth in Mbs being inspected ?2- how do i check if there is drops when cpu is reaching 10...