Network Security

I'm attempting to provide access from one FWSM to another, using VLAN's and ACL's. the purpose is to allow a set of servers behind one firewall, to use DNS appliances behind another firewall. Here is some basic config info:FIREWALL A = VLAN 1 - Hos...

Dear All, I have an ASA 5510 and suppose it already had some access-list setting, in fact, it works normally. However, now, I want to add a permission from my internal network to a server in the internet which use the specific port let said 5000. I h...

We currently have a pair of 5520's in an active/standby configuration. Is it possible to turn off the monitoring of the AIP-SSM module? We would like to do this when an reboot to the AIP-SSM is required and not have the ASA's failover.

Hi all, can anyone explain to me what an IPS does that a layer 7 application firewall does not, i need to know the biggest differences?also what can an IPS do for me in simple terms?

Hello,I'm trying to figure out how I can monitor with BGP peer went down using SNMP traps or any other methods that are out there. Basically I would like to get a trap that tells me the IP address of the peer that went down.Looking over the SNMP MIBs...

I have copied all files from Disk0: to Disk1 in an ASA5520, my interntion being to configure the device to boot from Disk1 and the upgrade the image from 7.2 to 8.03 and asdm from 5.2 to 6.1.When I look at the contents of the disks from ASDM file man...

Hi guys, I have a test PIX 515 here and I have just configured a logical interface as a VLAN. The switch can see the correct VLAN, and the pix can ping one host on the new VLAN, and vice versa, so the VLAN is operational.I am sitting behind an interf...

We have Websense running in the environment. The core switches (CAT6500) use a SPAN port to traverse Internet destined traffic to Websense and that works just fine. However, we have Remote Access VPN users that terminate on an ASA5520 and their tra...

Scenario: I have a server on a remote network that I would like to connect to when I am on the road. When I am on my own network I connect without issue, but on the road I cannot establish a connection due to the ACL on the remote firewall. I have se...

ASA5520, IOS: v7.2.4, ASDM v5.24I am new to the ASA appliance and I was testing different options in our new ASA5520 by setting up failover active/active (currently not in production). I was setting things up using the ASDM. For failover active/acti...

Hello,on a point to point connection with a 5510 Firewall edition on each end does it make sense to add an IPS module on both 5510s or just one side? Perhaps there is a way for the one IPS module to monitor both sides and automatically terminate tra...

Anyone got a template or script which would modify the necessary registry settings so that clean access agent will notice when the vlan changes and then would refresh ipconfig?I've deployed the NAC 4.1.3 in a OOB Layer 3 with central CAS deployment. ...

Hi allI was wondering whether it's possible to define a same subnet that exist on both the inside and outside interfaces on a PIX 515 running ver 6.3(4). For instance a subnet of 10.10.1.0/24. I'm setting up the PIX to receive RIP routing update from...

We have 3 remote sites all with ASA 5505s. We plan on enabling webvpn on each of them. We currently have it enabled on the ASA at our coporate office and have it authenticating using an RSA device. My question is does anyone know of a way so that ...

Dear all,    i have PIX 515e with SW 6.3(5).there is a patting rule with one global IP.LAN users tried to contact some site with very large delay ,when i clear xlate and arp the time needed to open this site decrease from 2 minutes to 40 sec.please f...