We installed ASA 5520 firewall which is connected to the Internet with NAT/PAT enabled but we started receiving complains about slow browsing. On checking the inside interface of the firewall it displays enormous number of packet drops!!!! Although t...
Hi, We have installed ASA 5505 in production and the Outside Interface V-lan ID is 2 with IP address 1.1.1.1/24.Now I want to change the V-lan ID and assign 100. So is there any command to change the V-lan ID or do i need to create a new one. If i cr...
Every so often the VPN will drop its connection to the internet. Manually resetting seems to be only solution in getting it back online. Is there another solution more automatic, or an update to the concentrator that would help?There was a firmware...
Hi, How do you create exclusion for certain directories and files, so that only those do get scanned by clam av on CSA?Some of the legitimate files are getting quarantined. I would like to avoid that. Sam
I am configuring an ASA 5505 for a small business client to replace Linksys router, and I am having some trouble with it. Any help would be greatly appreciated. Here is my config:sh run: Saved:ASA Version 7.2(4) !hostname ciscoasanamesname 192.168....
In IKE phase-1 we will share the following parameters:-1. authentication method used to authenticate peers2.Encryption method(DES/3DES to be used for Phase-2 data encryption)3. Hash algoritham to be used for Phase-1 and 2 Then why it is mentioned th...
Is there any document which shows the steps which happens in case of Aggressive mode of establishing Phase-1 SA since there are only 3 messages exchaged in case of aggressive mode and how the identityof each peer is protected from unauthorized peers.
Hi,I Have a doubt, I have the csa agent blocked with the function "Base - CSA Service and client UI control" (disable), but I cant stop the agent in the host, the command -net stop csagent- works in this case, or I need first enable the "Base - CSA S...
Hello everyone,I am aware that this question has been asked in several formats before. I have read through some of the previous postings and the documentation as well. However, since I am new to this, I thought it best to submit a new posting.I hav...
I have an ASA running version 8 software.I am looking for a way to manage url-lists from the command line. All the documentation online only shows that they can be managed from the GUI or by importing a file that already exists. As well, when I tur...
Are any of the Cisco 5500 series firewalls currently certified by ICSA?I searched the ICSA website and could only find a reference to older PIX firewalls once being certified in the past, but the certification expired over a year ago.
Hi.I load CSM, I click 'deploy' and up pops some IPS devices. How can I examine what changes will be made when I deploy them and/or how can I undo these change to get them out of the deploy list.
Hi,We use following version of PIX Security appliance and have ACL configured on it.Cisco PIX Security Appliance Software Version 7.0(6)Device Manager Version 5.0(6)We use text file as source keys for any changes made to the configuration of the fire...
