Network Security

Is there a way to get, from the syslog messages, which ACE of an ACL triggered a deny?frex, I have an object, Blocked_addresses, which contains 30 addresses. This is used in a deny in an ACL. This element of the ACL shows a bunch of hits, but no deta...

We have a pair of ASA 5520s in active/stanby mode. This part of the situation works great, configurations are always synced to the standby, nothing is lost. Planned failover has worked every time without users even noticing. We have an AIP-SSM-20 in ...

Hi All, I've setup ASA as easy VPN server. I don't want user authentication, which means when I run VPN client, I want to connect directly without to ask me username and password. I know we can do this in router, but I couldn't figure out in ASA. any...

I have been asked if i can setup my ASA5510 to allow for access to a secondary Exchange server for Outlook Web Access. So that if the first server went down it would automatically send mail and OWA to the new server. Although the Domain name of the s...

I have a couple of ASA's on the same network, one pointing to the internet and a second pointing to other networks. The problem i have is if i use the internet ASA as the default gateway i cannot communicate with the other networks through the second...

Hello, What is the difference between Syslog and SNMP traps ? Does Syslog mean every log message shown in 'show log'.

Hi,Voice application and another trade application running on port 10200 doesnt seems to work behind firewall((INTERNET))--[Router]---[Firewall]---[Core]the firewall is used for hosting Web server & site to site vpn ( natting public ip with private )...

Hi,Currently I am doing migration for a customer, I am deploying/modifying two ASAs in parallel (for simplicity: two ASAa have same vlans for inside and outside interfecs, respectively). The inside interfaces are connected to two core switches 6513 (...

We need to create a L2L tunnel with a provider but their standard is that they require us to PAT our internal segments\hosts (AKA "interesting traffic") to a public address. By that they mean an address in the same segment as the OUTSIDE interface of...

Hi,I have a situation with 2 PIX 525 running PIX OS 6.3(3) int Active/standby mode. The Primary has UR license, while the secondary FO license.The Primary is failing and the failover has taken over. I have 2 questions:- How can the license be moved t...

We have a site to site VPN which works perfectly ok. The host IP on our end is 192.168.35.10\32 which our vendor is accessing over the VPN tunnel.. no issues there.Recently we had to modify the IP address of the host to 192.168.45.10\32 and instead o...

Hi all,we need to configure proxy functionality in our PIX firewall for our clients.What we expect is to authenticate our incoming client's requests not directly in web server placed behind firewall but use firewall itself to send requests to authent...