Network Security

We are using NBAR to match on and subsequently filter certain urls and p2p traffic at a few customer sites. I understand that this is a substandard way to police user traffic in light of other content filtering options and if this proves unreliable t...

Hi all,I have a problem with inbound traffic. I have setup my firewall to allow traffic on http, imap4 and smtp ports. But I can't get through. Am I missing anything? Or did I do something wrong? My SSL VPN works no problem. Any help will be apprecia...

Our IPS sensor health shows that it can not retrieve events. The event status is showing not connected and will not start.Any ideas? I'm a newbie to this.Pauledit: Device status = subscription open failed.

Hi,Is this possible?I have a ASA 5520 with a trunk to many DMZ's/VLAN's (Cisco 3750) and on one DMZ I have a server that needs to contact another DMZ's server but send on a particular UDP port but the server must recieve it on a different port?For ex...

when using the names/name command on the pix , i just read about a limitation of 16 characters in the "name"http://www.cisco.com/en/US/docs/security/pix/pix61/command/reference/mr.html#wp1026003however .... this line from our current config would see...

Hisometimes I go to CS-Server-Admin-JobNrowser and delete old Jobs.But delete system inventory collection jobs or system inventory poller jobs doesn't work.(error-message "cannot be deletet")How can I delete these jobs?

HiI have branch connected to main office with fiber so now it connected with vlan but I want to configure IPsec for this I have to change the ip adress and add new one I mean I use one ip subnet so if I am configure IPSec I must use 2 subnet I want t...

Hi, I have two networks 1&2. Both have separate internet connections . ASA1 in network1 has three interfaces (inside/192.168.1.0/24) dmz (172.16.1./24) and outside (56.*.*.*/28). Its DMZ has connectivity to a layer 3 switch of second network network2...

Hi all,We have multiple context and need to send all Context log to one syslog server.For the context on the same network as syslog server, we can collecte log without problem.For all other contexts, no log reaches the server.We have put "logging hos...

All,When you use an AA or AS configuration, and these devices connect to the internet, do you have to burn two public IP addresses? Do they look like one address with a virtual IP?Thanks,John

Hi, I've been working on a VPN L2L tunnel between ASA5510 and Netscreen SSG for a month now with no success. The Netscreen is the remote VPN device and I have no control whatsoever on it. I, however, was able to get their config. Hope someone here ca...

Hi all, Another DMZ question I'm afraid. I'm trying to achieve the following and any assistance would be great.I want my Inside to PAT'd to the Outside and DMZ, I also need my Inside to able to access the DMZ via external (212*.*.0) as well as the in...

We are currently using CSA to prevent writing to USB drives by using "@removable" and defining a file set for USB (directories matching @ removable).This has caused a problem when using App-V-formerly SoftGrid to virtualize Adobe Eeader. App-V uses a...

I am wondering if it is possible to have 3 virtual external interfaces for 3 ISPs and configure 3 static PAT statements for one server on an internal vlan. The 3 default gateways are the 3 routers connected to the ISPs. Is there a way to get the fwsm...