Network Security

Can ASA's be configured in Active/Passive mode when the statelink goes through a switch?

Hi,We have configured 1800 ISR to access internet using and NAT ( actually PAT ) and overload feature.SImple mode fa0/0 is inside interface and fa0/1 is outside interface. We need to apply ip inspect and enable IOS firewall as a security feature.How ...

Hi i have dedicated server which has cisco pix hardware firewall installed.for some reasons my dedicated server is unable to connect to any of domain hosted on the server however it successfully connects to websites outside our server like google.co...

Is there a timeline for 64 bit Cicso Security Agent for Windows 2003 or 2008?

Hello All,I am having diffculty with NAC where its not doing posture assessment. I ran through the configuration guide and followed it to the T but still no luck. I am running NAC 4.5(1) for In Band wireless. Any ideas as to what i should be looking ...

Hi folks,got htis error and wondered if any one else experienced this and what the solution was.object-group service AD_Client_Ports tcp-udpport-object eq 135ERROR: Unable to add, access-list config limit reachedAdding obj to object-group (AD_Client_...

I can not ping internal computer from ASA. Comp IP address 192.168.187.15, gateway is 192.168.187.14 which is ASA internal interface. I've got an IP Phone connected to the same ASA with Ip address 192.168.185.15 and internal ASA interface 192.168.185...

Hi Friend I have a Cisco IPS 4255, and I put all the upgrades that Cisco recomend. So, I put the ARES signature with TCP RESET like the action, but the ARES is working without the problem, and I need to stop these traffic. How can I stop the ARES P2P...

Is there some way to create a signature that would produce an alert (eventually changing this to a deny connection) after any IP address hits the server 20 times in 60 seconds? I have tried using automatic IP which did not work and the Flood service...

Hi all,It's all about zone-based firewalling on an IOS router with 12.4(T) image.is there a possibility to log drops, that are caused by an inspect action? For example a packet with the tcp-flag "ACK" is dropped, because there was no initial "SYN" - ...

Hi all! We have an ASA 5550, that for some connections there is no record of Teardown. Logs of connections without Teardown:3 - 2009/06/24 00:18:24.235 BRT 10.x.x.x %ASA-6-302013: Built inbound TCP connection 88873324 for outside:172.x.x.x/228...

I have a very interesting problem. I have a new 1800 configured via the SDM to route out fasteth 0 with just the default single vlan in place. Service is 5Mbps wireless over radio-link.After trying to join a webinar after installing this router, I wa...

Hello Netpro world!I have an ASA 5505 with base license, running the new 8.2 code.I was interested in testing this perl script to automate configuration backups:http://6200networks.com/2008/02/06/using-a-script-to-back-up-asa-configuration/But I ran ...