Network Security

My standby firewall automatically reboots. I have changed the Failover cable and the RAM as well. Still the issue is not arrested. Attached the log when captured during automatic reload.

I have a question about creating a rulebase for my FWSMs. We have certain subnets behind a FWSM interface that need to have outbound http access restricted so that they can reach public IPs, but not most of the private ranges. I come from a Checkpoin...

Greetings, I am configuring an ASA 5510 with firmware version 8.0(4). In my setup, I have a routable IP assigned to the outside/wan interface (security level 0) and 192.168.0.0/255.255.0.0 block on one interface (security level is 100 and name is ins...

I read the info ( see attachment )in Cisco book "Cisco ASA , PIX,FSWM Firewall handbook , 2nd Edition by David Hucaby" that for outbound operation , xlate happens before ACL (2nd line in attachemnt ). Moreover ACL uses translated IP rather than its l...

Hi,I am configuring FWSM with INSIDE and OUTSIDE interface (zones). For testing I have configured the access-list as belowaccess-list OUTSIDE permit ip any anyaccess-list OUTSIDE permit icmp any anyaccess-list INSIDE permit ip any anyaccess-list INSI...

It seems each time our ASA's failover (at least once a month), that our Cisco VPN clients no longer connect with a error 433 unknown. Our Anyconnect clients work just fine. Failing back seems to do the trick. Is there anything specific I can look for...

Is vlan mapping still needed for L3 IB deployment????? the documentation is not very clear on this. We have a lab setup, clients are connecting properly to the NAS/NAM, but they cannot access anything on the trusted side.. we DO have vlan mapping ena...

I have the same security interfaces:interface Ethernet0/0 nameif dmzlan security-level 40 ip address 192.168.164.56 255.255.252.0 !interface Ethernet0/3 nameif dmzinet security-level 40 ip address 213.182.168.1 255.255.255.0 And used "no same-securit...

We have our firewall hitting 98% at some occasions and it has pretty huge connection count 15561 and this was usual and utilization used to stay at 50 tp 60 % but suddenly it pikes up to 98% a day and come back to 50 next morning.. i tried all i can ...

I have one cisco asa5510 and i use the cisco ADSM 5.0 to configure the firewall. and i set the eth0/0 ip as 192.168.1.1/24, eth0/1 ip as 192.168.10.1/24 and running dhcp. the two interface is up and i use the hyperterminal, try to ping from network 1...

I have an ASA on 8.04, and have set up hairpinning to allow internal desktops to access a pair of servers via their public addresses. Config snippet below - essentially as per the CCO DNS doctoring document except for the second server. Desktop-serve...

I have ASA-SSM-CSC-20with 1000 user license and Plus licenseI wan to renew it with 250 user only.Is it possible?Or Do I need to buy new license?

I'm having an issue where I can sit on the PIX and ping everything on the internal network. I can ping everything I've allowed on the external network as well. However, I can't get traffic across the NAT to ping. Here's the config:PIX Version 6.3(5)i...

Pros,In one of my project, the 6513 with dual fwsm installed as the core with backend firewall configuration. The outside fw zonewith secu level 0 contains dhcp server and the inside users getting the IP address dynamically.When the fwsm active modul...