Network Security

Is there a way to get, from the syslog messages, which ACE of an ACL triggered a deny?frex, I have an object, Blocked_addresses, which contains 30 addresses. This is used in a deny in an ACL. This element of the ACL shows a bunch of hits, but no de...

Hello All,I have noticed for 2 weeks that I have an 85-89 % usage in my ASA 5510.I have checked teh logs and nothing odd..the number of concurent connections ar about 500-600.What can I do to decrese teh memnory usage?ThxVlad

I need to have two external ip addresses configured on the ASA Outside interface. Both ip addresses will be on the same subnet and one will have VPNs terminated on it. I know it would be easier to just terminate everything on a single IP, but I hav...

What is the best way to see if the PIX throughput is being maxed out?..

Hello I have a PIX 515E on 6.3(4) version with internal network 192.168.20.1/24. This is connected to switch and workstations on the switch with GW 192.168.20.1I also have another internet network 172.24.10.x which is connected via the main switch to...

Is there a tool to convert IOS ACL to FWSM format ?i.e. conversion of wildcard masks to appropriate subnet mask

Morning peeps, Does anyone have any good resources for routers using Zone Based Firewalls and applying QoS policies to the IP interfaces of such?Or is it simply the same as a router using Classic IOS Firewalls?RegardsPaul

HiIn my system VPN connectivity is running fine. VPN configure in my ASA 5520. Remote users access the VPN and work in LAN.But Today and before some of day suddenly useres can not connect in VPN , messeage promt " Secure VPN connection terminated by ...

Hi,we have 2 pix system with failover and standby fascility, now i would like to use astandby pix for other jup, but i coudlnt do any, because the worrning message allows supplied that "this pix is standby" , so i need to erase this fascilty to do my...

hi, anyone has any sample configurations ? i just look at look at pdf guide and could not understand it. a few questions too. 1. The IPS signature id 13000 +- is using 'traffic anomaly engine' , it is related to AD settings ? is it correct to say th...

I need to disable aggressive mode. Can it be done on this version or does it require an upgrade?

Hi, How can the login and command history with timestamp be configured on FWSM/ASA devices. Regards.

Hi,Does anyone know if it possible to export a security certificate from one set of ASA's to another? And how this might be done?From the documentation I haven't seen anything about this. From experience you need a CSR to which you then add the certi...