Network Security

do CSA block certains applications when learning mode enabled?Our client claim that there are some services that are blocked, like network-printing, network share for windows clients.The CSA-MC log don't show these blocked services.Best regards

Hello,first time, sorry for my english.so i explain my problem.i have An ipsec vpn with 2 pix 515 and a router on 1 of this site.lan_a-->Pix_a--ISP--Pix_b<--Lan_b<--router<--Lan_b2traffic for lan_a and lan_b, no problem.traffic for lan_b and lan_b2, ...

Any ideas as to how onside of the tunnel is not encrypting traffic thanks #pkts encaps: 0, #pkts encrypt: 0, #pkts digest: 0 #pkts decaps: 26731, #pkts decrypt: 26731,show crypto isakmp sa18 IKE Peer: Vendor Type : L2L Role : responder Rekey : no Sta...

After reviewing some of the Cisco documentation on integrating WLC with NAC, requiring the WLC to be L2 adjacent to the CAS, I am assuming that the WLC can not be configured to use LAG on the 4400 seies WLC, a specific port on the WLC must be assigne...

I have two vpn configurations posted,are they correct, will the 2 routers be able to establish vpn connection through the internet ?

i have an ASA-5510 and there are 4 physical Rj45 ports but when i open ASDM i can only see and configure 3 ports. i already have INTERNAL, EXTERNAL and DMZ configured but i am planning to add 1 more channel for an External network. how can i do this?...

Hi Guys,I am a bit confused about which contracts I should purchase for our equipment. We have1) ASA55202) AIP-SSM-20What we want is hardware/software upgrades on both the firewall and module, as well as IPS signature updates. I have so many differen...

What is it that this exactly does and why does it do it?This is ver5.0.7 used with an ASA5510 ver7.0. The ASA was pretty much all configured before starting the ASDM. My analyst doesn't think it is of much use but I like it. I need to convince him ot...

Hi, I have a site to site VPN between the 2 PIX Fw. Is there a way to check if traffic is being carried over this connection ? the amount ?thanks.Jean

Will the following MPF configuration override the existing connection timeout value for connections originating from 1.1.1.1?(obviously for TCP connections only)timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02access-list custom_timeo...

I have a web server on our inside network (10.15.20.20) that I'd like to have receive responses from a /29 block of external IP addresses within my outside interface's IP block. So basically I'd like any web traffic that hits 222.222.222.176/29 autom...

I am looking for some advice on how to properly setup a site to site VPN when there's overlapping subnets. i.e. if you have 172.16.x.x on both sides of the tunnel.I have set this up before and here's my config but I'm not sure if this is the best way...

Hi all.I have two ASA 5510 in Active/Standby each with ASA-SSM-10. This is a new setup.ASA ver is 7.0(8)IPS ver is 6.0(4)E1When I go to configure IPS within the ASDM it tells me "sensor major version is newer than the supported version"I presume I ne...