Network Security

I have an issue where a client is using the Cisco VPN client from behind a firewall. The client is on a 10.0.0.0/8 subnet, and the devices that they are trying to access are on a 10.2.128.0/24 subnet. Because the Clinet software only adds a 0.0.0.0 r...

I have a new ASA 5510. I do I get around the followng error: "ASDM unable to read the configuration from ASA"

Dear all ,I have IPS 4270 that was working fine. But since 1 week,i was not able to access IPS and was giving error when pulling the configuration from IME (kindly see the attach).Also the sensor's health shows that the status of "application failed"...

Hi,when you enable SSL VPN on the outside interface, is there a way to specify :1- which ip addresses that can access this page ? (is it by ACL on the outside inteface ?2- i didn't find a max-retry lockout policy, so someone can access this page and ...

Hello Pro, command: fixup protocal smtp 25 will only let seven RFC smtp commands pass though PIX525 with 6.3. Would you please give me some advice on how to let all microsoft smtp commands pass through pix525? I have issued no fixup protocal smtp 25,...

My standby firewall automatically reboots. I have changed the Failover cable and the RAM as well. Still the issue is not arrested. Attached the log when captured during automatic reload.

I have a question about creating a rulebase for my FWSMs. We have certain subnets behind a FWSM interface that need to have outbound http access restricted so that they can reach public IPs, but not most of the private ranges. I come from a Checkpoin...

Greetings, I am configuring an ASA 5510 with firmware version 8.0(4). In my setup, I have a routable IP assigned to the outside/wan interface (security level 0) and 192.168.0.0/255.255.0.0 block on one interface (security level is 100 and name is ins...

I read the info ( see attachment )in Cisco book "Cisco ASA , PIX,FSWM Firewall handbook , 2nd Edition by David Hucaby" that for outbound operation , xlate happens before ACL (2nd line in attachemnt ). Moreover ACL uses translated IP rather than its l...

Hi,I am configuring FWSM with INSIDE and OUTSIDE interface (zones). For testing I have configured the access-list as belowaccess-list OUTSIDE permit ip any anyaccess-list OUTSIDE permit icmp any anyaccess-list INSIDE permit ip any anyaccess-list INSI...

It seems each time our ASA's failover (at least once a month), that our Cisco VPN clients no longer connect with a error 433 unknown. Our Anyconnect clients work just fine. Failing back seems to do the trick. Is there anything specific I can look for...

Is vlan mapping still needed for L3 IB deployment????? the documentation is not very clear on this. We have a lab setup, clients are connecting properly to the NAS/NAM, but they cannot access anything on the trusted side.. we DO have vlan mapping ena...

I have the same security interfaces:interface Ethernet0/0 nameif dmzlan security-level 40 ip address 192.168.164.56 255.255.252.0 !interface Ethernet0/3 nameif dmzinet security-level 40 ip address 213.182.168.1 255.255.255.0 And used "no same-securit...