Network Security

I find so many events listing on the sensor that report numerous events which list the source and/or destination as 0.0.0.0. In this event, the “attacker” is a known and permitted host. However, my ACLs do not permit it “any”. I have no idea ...

We configured multi-Context on 6509 FWSM. We have issue since we change the IP address of one vlan interface which is assigned as the Outside int of one context. It's interesting that ASDM shows this Outside int is down while CLI shows it's up. I hav...

Hi,I am using ASA 5580 with software Version 8.1(2). Could it be possible to access the NATTED IP address and also the physical IP address at the same time from the host.

Hi All,This is a strange problem I have come across cisco ASA. Let me know if any one has experienced or is this known issue.A tunnel configuration is set for site to site and is working fine for many days.Case 1. I disconnected the cisco asa from th...

Can I map the host part in a dynamic NAT translation "one to one"?I am separating two private class C networks with a PIX 525 firewall (v7.0).I would like the last octet to be preserved during the translation without entering 254 static statements.E....

There is a default Perfigo root CA certificate that comes with the installation of NAC, I have now purchased a valid Verisign CA cert, when i import the root CA into trusted CA's its accepted, however when generate a cert request and get it back from...

Hi,I need to manage an ASA 5510 by remote using a Cisco vpn client.I have a 7.2(1) an it's running. I logged into the vpn and ssh I can connect the inside IP of the ASA. I cannot ping the inside IP!Trying the same scenario on another 5510 with ASA 7....

Hello There,I have to sites to configure VPN connection. Each have a Cisco 1721 router. Can anybody help with a VPN configuration samples or guides for this? ThanksDaniel

I have an ASA 5505 setup with 3 vlans (outside 0, dmz 50, and inside 100). I can't figure out how to allow the clinets on the inside vlan access to the dmz. inside has access to internet, dmz has access to internet, and internet has access to dmz. My...

IPS 4255 6.0(4)E1 is installed in Inline mode(one interface Inline pair) between Nokia Checkpoint Firewall and Cisco router connected to ISP through Cisco Switch. In another Inline pair is connected to Intranet traffic and DMZ.Interanet is working fi...

Have a need for remote support application to use port 80 traffic instead of 443 as some remote support users have port 443 blocked. Traffic is not http, so this needs allowed. Seems like default for ASA 7.2(4) is to block non-standard http. Not much...

There is one particular outside mail server we're having trouble sending to. Basically, our server (Groupwise) does an EHLO, and the other server offers STARTTLS. Our server sends a STARTTLS, sends a few bytes of encrypted data, and then the other se...

I have a remote site that has somehow managed to loose the power cable that plugs into the power adapter and the wall for the ASA 5505 they have locally. This is the only office that I have with a 5505, so I dont have another one to compare against. ...

My configuration is simple and testing has gone well.... I started off with a Class map that only matched on an access list. After successful testing I added a subordinate class map for protocol matching. If appears to be working but the statistics d...