Network Security

DMZ = 172.16.1.0/24Screened Subnet (behind ASA) = 172.16.3.0/24I have numerous static NAT entries for HTTPS traffic to the 3.0 network, advertised on the outside as a 1.0 address.The 1.0 network is a directly connected network between my border and t...

What's the command to view the configuration files saved in Cisco PIX

We've got a security server running Retina that recently ran away and opened up tens of thousands of connections through our Pix 515E to devices it's supposed to scan. This caused memory on the PIX to run low, caused dropped connections on other sess...

Hi allWe have a redundant Cat6500-E with Sup720-3B and FWSM setup.Software releases:Sup: 12.2(33)SHX2FWSM: 3.2(6)The issue, if I add several new VLANs to the Catalyst and then give them to the FWSM with the command:firewall vlan-group 1 14-18,20,21,2...

%PIX-1-104001: (Secondary) Switching to ACTIVE - Set by the config command.Prior to that, there is no indication of any issues. I initially believed that is the result of a manual failover but there was no evidence that anyone logged in.Any assistanc...

All,I have an ASA 5505 that I'm trying to get a tunnel up with a 2800 series router. The tunnels get established, but the ASA side is encapsulating and not decapsulating traffic and I'm not able to pass traffic.I have the following:WinXP host (10.125...

Working in a VSS environment, one firewall in each catalyst, configured with two context and Active / Passive scenario. One VLAN exist between two context, but no communication between context over the VLAN. ARP is showing same mac-address on two dif...

Hello Experts,I have been using the time based ACLs for quite a while now. But I never able to figure out, to how many time-ranges we can create on a ASA 5510 and ASA 5520. Is there any limitation to that, to how many time-ranges we can define?Thanks...

Hello how do i export the ASDM syslog message to a file and how far back can I go to get information?

Hi everyoneHad a couple of riverbed devices which were causing lots of SSL malloc errors on the ASA firewalls. Theyve been taken out for now but theres still malloc errors but nowhere near as much. When there were loads of malloc errors Webvpn connec...

with my last post, I got bidirectional nat to work from outside -> inside. Config below:global (inside) 99 10.153.99.1nat (outside) 99 10.148.12.0 255.255.255.0 outsideNow, the problem is getting NAT to work from inside -> outside. This is the error ...

Hi, I've upgraded one IPS (ASA-SSM-20) to release 7 and now I can't see any events on it and obviously MARS doesn't receive any data from IPS. I've tested that virtual sensor is assigned to Gigabit Ehternet 0/1 and Global correlation seems to work ok...