Network Security

I am doing a source address nat in FWSM with the following. But sniffing the packet outside FWSM, I don't see the source IP being NAT'ed. Commandstatic (DMZ2,DMZ3) 10.1.1.5.0 192.168.50.0 netmask 255.255.255.0DMZ2 is where the traffic is originated a...

HiI have a requirement to dynamically learn routes on one side of a firewall pair and send them to the inside. I have suggested running one OSPF process on the outside and redistribute specific routes into another ospf process on the inside. The fire...

Hi folks,<br />I got curious after enabling and loading IPS signatures into our routers. I used the latest IOS-S376-CLI.pkg file to load basic signatures set. Now then I have signature definitions files in the routers flash in xml format. <br />How a...

We have upgraded pix 535 from 6.3 to 7.2 after which we are seeing high CPU utiliztion, system has 1Gb of RAM. If we verify in the pix it says more of the process is taken by "Dispatch Unit". pls can some help on this.--srini

I am getting the following message in PIX-515 log file:[ Scanning] drop rate-1 exceeded. Current burst rate is 10 per second, max configured rate is 10; Current average rate is 2 per second, max configured rate is 5; Cumulative total count is 1283Pix...

I am going to test the ASA performance to see how much heavy load it can handle especially for vpn traffic. The only command I knew areshow cpushow memoryIs any other command I can use to check the performance? Also, what's the recommend threshold fo...

We have established an MPLS connectivity towards the remote client end. All users in the LAN are able to access the remote end servers through PAT over the MPLS circuitnat (inside) 10 access-list mpls_trafficglobal (MPLS) 10 interfaceThe problem is t...

ASA5510 with ASA-SSM-10ASA 8.0(4), ASDM 6.1(5)51IPS 6.2(1)E3, IDM 6.2(1)some "cosmetic" problems, but they do confuse the operators:1.neither ASDM nor IDM reports on the "Licensing" gadet the correct "Auto update" status. It is reporting "Not checked...

Have any of you ever used TPM to secure a VPN connection into a corporate network? I'm interested in doing two factor authentication. Ideally, only laptops that I authorize will have access to the VPN tunnel. If the laptop were to be lost or stolen I...

Which device should I buy for a small Mac network?I will have one Mac getting data from a VPN, and another Mac accepting a forwarded 80 port answering the browsing clients. I have to control the whole system remotely, probably by a forwarded port 590...

Hello folks,I am trying to block messenger using Zone-based Policy for certain users from the local network. This is still lab environment recreation for a customer. It does not seem to work and I am not sure this is the right way of doing this in th...

Hola tengo un pix 515e. Tengo asignadas 5 direcciones ip públicas asignadas por mi isp y necesito poder administrarlas con el firewall para poder hacer Nat, etc. Utilizo el software ASDM de cisco y quiero saber como configurar esas ip sobre mi inter...

What is the definition of Static Identity NAT ? I am not able to find much explanation on it. Is Static Identity NAT available/required in FWSM.