Network Security

how i configure failover

Hi All, we've installed IPS 4240 since 6 months ago and everything worked fine. Then I noticed time in IPS was not correct, then in the IDM, I've changed summer time to 60 minutes offset to get the right time from NTP. then reboot the IPS, since that...

I inherited a network with 2 506e firewalls. For some reason they can only be accessed from one specific PC. Of course, it's not my PC. I was informed that "it is very sensitive to the Java version that is loaded" and that mine may be the wrong versi...

Hello Pro,I have two asa5540 configured in standard Ac/Standby failover mode, but often switchover automaticlly. Probably in 30 minutes switchover to secondary asa5540 up. when I manually switchover back to primary asa5540 by issing failover active. ...

HI,I tried to configure remote access vpn on pix 515e with 8.0 pix software version through CLI with the following link http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a008060f25c.shtml#cli I tried to connect to the vpn...

I've got a really basic WebVPN configuration going and for some reason I cannot even get the portal to show. I keep receiving the following error in my syslog:%ASA-6-710003: TCP access denied by ACL from x.x.x.188/2856 to outside:y.y.y.14/443Here's m...

Good Day,We have an ASA 5550 v8 installed to provide nothing more than one to one dynamic nat in a large college residence hall. (One public IP is reserved for PAT in the event that the public one to one pool is depleted).As a college residence facil...

Hi - When configuring static NAT, the configuration guide states that you use the format 'static (inside,dmz)' where your connections are going to be initiated from the inside to the DMZ.Access-lists permitting, will this allow connections to be init...

I got an FWSM that I'd like to try using Trusted Flows Acceleration on. The docs say to use the service-acceleration command, but it just complains that I don't have the required license key. sh version says Service Acceleration is 'Disabled'. My ven...

Hi, when trying to connect two cisco routers through VPN, the only debug I have after activating it for crypto isakmp error, ipsec error and crypto engine is :*Apr 22 14:31:31.672: ISAKMP:(0:0:N/A:0): construct_initial_message: Can not start Main mod...

How to see the total flash size of Cisco C6500 FWSM..

Hi,what is a default value of spanning tree cost for data port on IDSM2 module?If we put commandintrusion-detection module 4 data-port 1 spanning-tree cost 1what is changed?

Hi,I've configured a active/passive cluster with a couple of 5520s. When making changes to the cluster, I don't worry about primary/secondary or active/standby, I simply use the ip address of the active ASA.Is this ok/normal/best practice? Does it ma...