Network Security

I have 2 5540 ASA in an Active / Standy setup. The Active firewall has a packet shaper sitting between it and the inside LAN. When I reboot the Packet shaper the FWs failover. I have the default timeings for failover 1 second hello 15 seconds keepali...

I need to configure the following rule and need help to configure a ACL:Server (192.168.254.22)is in the DMZFrom server Port 1521 open only to users inside the xyz domain (not externalusers)From Server Port 80 open to any host (internal and external)...

I have an issue occuring that I've not saw before.I have a Global NAT configured. I have a single host that continues to display with 2 translation (both the same). the translation is correct, but I cannot communicate with the box. what happens is th...

hiI'm reviewing the situation next three traffic zones outside, inside, DMZ,service-policy xxxx-policy interface outsideservice-policy xxxx-policy interface insideservice-policy xxxx-policy interface dmz_stgoand I need to lower the level of examinati...

I have an IPS-4215 that I am putting online for the first time. I am upgrading the signature file. My question is this: what else do I need to download to monitor this device once it is running?

Hi, What are the steps to enable SDEE on AIP-SSM in Cisco ASA. Thanks.

Hi, recently i connected in the network a failover system ASA 5540 [Version 7.2(2)] (active/standby). I have added the command login banner and I had already enabled ssh version 2. Unfortunately when i make an ssh session to ASAs the banner does not ...

We have the problem of multiple VPNs connected by UMTS-Routers to our RV042. Often our provider routes different UMTS-connections through ONE public ip-address, so that some Remotegateways on our VPN-Router show the same ip-address. Only one remotega...

Hi,I've recently installed AIP-SSM-20 in the ASA, I need to know the following info.1. Is keeping the latest sig.def file (Sig.420) with default actions, will be sufficient for the protection?2. If I change any one signature behavior, what will happe...

I have a question concerning dual homing connections from the ASA 5510 to two switches (See Attached). What I am trying to do is see if there is a way to load share between the switches on the untrusted side (in RED) from the traffic that is coming f...

Is there a way to write a custom signature that looks for a IP address making rapid connection attempts to an IPSec termination device trying to brute force a pre-shared key? Would this be something the Anomaly Detection engine would detect?

Hey All,Scenario:I have a cisco 851 that is connection to an ASA box. I don't have access to the ASA (outsourced company) but the 851 is local. They initially wanted to run private Ip's on the switching side but we told them thats not the standard fo...

Dear All,I know that the asr-group command permit to a couple of interfaces (belonging to the same group) to re-route a return packet for a connection thatoriginated through its peer unit.But the asr works also for the new connections?If a new connec...

Anyone ever experienced an issue where your Sophos appliance that sits behind the ASA firewall cannot make a TLS connection outbound due to the ESMTP inspect option?I don't want to disable it entirely. Is there a way to create a policy map to disable...