Network Security

Dear friends,On the 6500 switches, we have an option to give interface level commands like ""no ip unreachables", "no ip redirects", "no ip accounting access-violation"".Is there a FWSM equivalent command for this?Thanks a lotGautam

i'm using pix firewall and using it as a firewall and as a proxy server, the problem is that i can't block the web access from the clients that installed on their pcs a program named ultrasurf , this program changes the web proxy setting in the inter...

Hey Everyone,I've run into a problem and I can't tell if it's a "you can't really do that" type or the brain-fart type.We are starting to test out the AAA cut-through-proxy feature to see if it can satisfy some access requirements we have. I have the...

We are going to have 10 remote sites connect to us for a L2L VPN to access data at our location. We have no control over the remote sites, and my guess is most will br 192.168.1.x IP range. How can we make this work?? Remember, I have no control over...

Hi: I can't seem to figure out what these two messages (609001 and 609002) from a PIX firewall mean. Can someone help.======================Message: %PIX-6-609001: Built local-host interface_name:IP_addressExplanation: A network state container is re...

so we have a NAC in our lab, set up as L3 OOB....we have a vlan set up for internet only access..a route map is configured on the CORE to send the internet only traffic back to the NAC for restrictions (to mimic the inband solution)......in our unaut...

Hi everyoneWe're noticing under stress testing that our ASA5520 is maxing its CPU out at about 3900 TCP connections per second. This is way lower than what Cisco quotes, and our rule set is quite small (a few dozen rules).Is this normal? We are using...

Folks, I have a question regarding FWSM failover. I was reading the documentation and it said that hellos are sent out over the failover link as well as all the interfaces. If any of the interfaces goes down the firewall is declaired down???what is t...

I have asa 5540,four interfaces inside,outside,intranet,dmz,inside.i have my antivirus and domain controller dns server is in inside zone ip 192.168.x.x and some my web servers is in dmz zone ip 192.168.y.y,now i want to insatll antivirus trend micro...

I have a FWSM that seperates various segments on the network. For some reason at times connectivity to some hosts stops without any indication why.I had done some checking and discovered that there seems to be a corrupt XLATE created at times, which ...

I have a cisco ASA 5540 firewall with a DMZ segment, Inside segment & outside (Internet segment). The web server with website domain www.mysite.com is in DMZ segment NATted with public IP on Internet segment.I have allowed full internet access to a m...

Folks, I am confussed about the failover process on 6500. The doc says that if the firewall does not receive hello on failover link, it does network activity test on the interfaces. My question is what if the interfaces have gone down on a firewall b...

Please identify the difference between the base license and the Security bundle. I'm confused on the number of interfaces and VLAN's supported on the two bundles. The sales documentation I look at indicates that the base bundle supports 5 FE and the ...