Network Security

Hi,when you enable SSL VPN on the outside interface, is there a way to specify :1- which ip addresses that can access this page ? (is it by ACL on the outside inteface ?2- i didn't find a max-retry lockout policy, so someone can access this page and ...

Hello Pro, command: fixup protocal smtp 25 will only let seven RFC smtp commands pass though PIX525 with 6.3. Would you please give me some advice on how to let all microsoft smtp commands pass through pix525? I have issued no fixup protocal smtp 25,...

My standby firewall automatically reboots. I have changed the Failover cable and the RAM as well. Still the issue is not arrested. Attached the log when captured during automatic reload.

I have a question about creating a rulebase for my FWSMs. We have certain subnets behind a FWSM interface that need to have outbound http access restricted so that they can reach public IPs, but not most of the private ranges. I come from a Checkpoin...

Greetings, I am configuring an ASA 5510 with firmware version 8.0(4). In my setup, I have a routable IP assigned to the outside/wan interface (security level 0) and 192.168.0.0/255.255.0.0 block on one interface (security level is 100 and name is ins...

I read the info ( see attachment )in Cisco book "Cisco ASA , PIX,FSWM Firewall handbook , 2nd Edition by David Hucaby" that for outbound operation , xlate happens before ACL (2nd line in attachemnt ). Moreover ACL uses translated IP rather than its l...

Hi,I am configuring FWSM with INSIDE and OUTSIDE interface (zones). For testing I have configured the access-list as belowaccess-list OUTSIDE permit ip any anyaccess-list OUTSIDE permit icmp any anyaccess-list INSIDE permit ip any anyaccess-list INSI...

It seems each time our ASA's failover (at least once a month), that our Cisco VPN clients no longer connect with a error 433 unknown. Our Anyconnect clients work just fine. Failing back seems to do the trick. Is there anything specific I can look f...

Is vlan mapping still needed for L3 IB deployment????? the documentation is not very clear on this. We have a lab setup, clients are connecting properly to the NAS/NAM, but they cannot access anything on the trusted side.. we DO have vlan mapping ena...

I have the same security interfaces:interface Ethernet0/0 nameif dmzlan security-level 40 ip address 192.168.164.56 255.255.252.0 !interface Ethernet0/3 nameif dmzinet security-level 40 ip address 213.182.168.1 255.255.255.0 And used "no same-secur...

We have our firewall hitting 98% at some occasions and it has pretty huge connection count 15561 and this was usual and utilization used to stay at 50 tp 60 % but suddenly it pikes up to 98% a day and come back to 50 next morning.. i tried all i can ...

I have one cisco asa5510 and i use the cisco ADSM 5.0 to configure the firewall. and i set the eth0/0 ip as 192.168.1.1/24, eth0/1 ip as 192.168.10.1/24 and running dhcp. the two interface is up and i use the hyperterminal, try to ping from network 1...

I have an ASA on 8.04, and have set up hairpinning to allow internal desktops to access a pair of servers via their public addresses. Config snippet below - essentially as per the CCO DNS doctoring document except for the second server. Desktop-serve...

I have ASA-SSM-CSC-20with 1000 user license and Plus licenseI wan to renew it with 250 user only.Is it possible?Or Do I need to buy new license?