Network Security

I want to upgrade a failover pix 535 bundle with 6.3(3) to 7.2 but I do not have enough memory in the flash, can anyone tell me how to go about this. Also the flash directory layout is not clear. If I do dir flash or sh flash, the name of the files a...

I have seen various threads that state something like "you can use IME to replicate/syncronise the AIP modules". However, I have NOT found out how to actually accomplish this. Can anyone point me to the documentation or give step-by-step how to repli...

ASA Version 7.2(3)Global NAT on outside Interface plus two Static PAT on the same outside address.But the static PAT don't work.Configuration as follow:(omitted)name 192.168.100.60 LAN_RDPname 192.168.100.100 LAN_SMTP(...)access-list inside_nat0_outb...

I have previously set up an ASA to authenticate VPN users against Active Directory in version 7.x Can a PIX running 7.x do the same thing?

Greetings- From time to time I come across an issue which I have to determine if certain web content is being blocked by the ASA. Having limited html knowledge, how can I determine for sure the content that is being blocked maps to the log message I ...

Hi all guru,I'm just curious if it is necessary to implement NAC Appliance & CSA in the same environment? This is because if i'm not wrong, i thought "Cisco Clean Access Agent" will be installed on Client as well? Hope to hear come feedback from all ...

Hello,I have two sites i have configured as below:VOIP -> Router -> Gateway (VSAT).See config (question afterwards)Current configuration : 2030 bytes!version 12.3service timestamps debug datetime msecservice timestamps log datetime msecservice passwo...

Hi,I'm attempting an upgrade from 12.4-18 to latest 12.4-24T on a 1841 (my point for upgrade is to allow TCP out of order segments through the firewall which seems to have been introduce in 12.4-11T).The router uses NAT, and a PPP dialer for an ATM (...

Hello,If I read the documentation, I have to go to ACL Editor/Access Rules, and click "Log matches against this entry"However, my statefull rules are configured under ACL Editor/Firewall Rules, and there I do not have the option "Log matches against ...

I have two ASA 5520 and two ASA 5540. On the 5540 there are some site to site VPN's. I have upgraded all 4 of them from version 7.2.2 to 8.0.4 and suddenly all site to site vpn's could ping a database server (oracle) could connect with sql and run qu...

Hi,I have a trick case with a ASA 5520 and a intranet in Internet Explorer. There is a picture, flash and document manager and the trafic get blocked when using IE, but not in Firefox. The intranet is using port 80. Anyone else seen something like th...

Hi, I have configured an ASA recently. After finishig of basic configurations, I tried ping from inside to outside interface and vice versa. But ping is not successful. I was getting ?????. I have tried "icmp permit any OUTSIDE" and "icmp permit any ...

Hello All,I'm fairly new on ASA world. I have a pair of ASA 5520 active/standby failover running version 8.0(4). I'm not sure if these issues that I'm facing are related to this software code but here are the issues:* CIFS access on the clientless SS...

I have configured a VPN client connection in a PIX 506. The VPN client user gets a solid connection to the pix & an IP address assignment from the pool. But he is unable to connect to any address on the local network. John G.