Network Security

We have an ASA firewall with 3 active interfaces on it. Inside,outside,and a dmz interface. We have workstations in the DMZ that only communicate with the internet. The Sec level for this interface is 50. There is no ACL or NAT's in place as the dmz ...

Hello All,Is it possible to monitor some Site-to-site VPNs that include unmanaged devices? I tried to discover a few site to site VPNs using the wizard but it always fails with saying that CSM can only discover site to site vpn on managed devices.May...

Hi,I have the problem that I need to ping the remote side interface in a multiple context configured fwsm and cannot achieve it. Need this urgently and help is welcome.Client 1.1.1.20 - 1.1.1.1 (MSFC) 2.2.2.1 - 2.2.2.2 (FWSM) 3.3.3.1Ping from 1.1.1.2...

Can anyone help with this issue, since a couple of days ago we are having trouble accessing certain websites. When attempting to access the site the PC will hang and eventually display "Request Timeout". On other pages certain parts of the site will ...

Hi All,I just want to ask a general question regarding the CSA software... Does it work by analizing the network traffic and then reporting everything not 'normal'? Or can it work based on signatures as regular IPS devices?Thank you!

I have an ASA 5505 that I would like to use to allow staff to VPN in to the main network.However, our current firewall is not to be replaced. The ASA must go on the network as an addtion.I have run a line to the ASA and given it a public ip address o...

Hi,I'm using ASA5510 ver8.0(3), still having trouble with the routing. Sorry to keep reposting on same topic, I thought I had it resolved....From PC (GW pointing to ASA) I'm able to ping all Network devices and servers with the nonat ACL setup. I jus...

I have a single FTP server behind and ASA 7.2 firewall.The FTP server is our primary FTP server and listens on the standard control port 21 using passive FTP.We need to use the same server to run a separate instances of FTP but on control port 2121.T...

We are currently using ASA 5510s in all of our sites. We implemented a load balancing piece of hardware for multiple ISPs at Site A. At Site B and Site C we have configured the VPN tunnel with multiple peers for each of the two IP addresses we are us...

I've done several NAC installs with CAM HA configured, always with a crossover cable connected between the two and with IP addresses on the failover interface in the same subnet/network. My question is: is it possible to have the failover CAM's in se...

Hi, I have a vpn Concentrator type 3030.Concentrator generate by default LOGxxx.TXT files (File management)with weekly intervals. How can i increase the interval to be generated on dalig basis? Tanks a lot in advance.

Hi Guys,I have a 7600 router with a FWSM.The FWSM is not active at the moment.The 7600 has a fibre connection west to the ring and a connection east to the same fibre ring. There are multiple routers on the ring but the 7600 in the headend router.I h...

I have PIX 515E ver 7.2. I have generated a key for ssh access with a commandcrypto key generate rsa modulus 1024and I saved it likewr memthen I allowed my workstation Ip for ssh access.it worked fine, but after sometime the generated keys disappear ...

Hi all. My office is using cisco asa 5510 as firewall and is connected to office/dmz/internet networks. I allow my office network traffic to access dmz network but deny vice versa. To allow my office network to access dmz network i can either do NAT ...