Network Security

I have 2 c6509 with one FWSM (3.2) in transparent mode on each chassis.Context1 for server1, and context2 for server 2 . A client in outside try to use proxy ftp, once issue 'proxy get texst.txt', the connection closed. Pls helpclient> ftp ftp> open ...

Is there a way that we could restrict a desktop machine accessing any other system in the network ? if so will we be able to implement an encrypted communication between the end machines .

Hi, We were able to ssh into the ASA management interfaces and all of sudden it has stopped working. The ssh client is putty. I ran a debug on the ASA while initiating ssh from putty and following is the output. ANTIX-ASA/stby# Device ssh opened succ...

Hi,I have AIP-SSM-10 module which is plugged into cisco ASA.The issue which I am facing is when executing the command hw-module module 1 details output from cisco ASA console I see the status of IPS has gone into unresponsive.The output is shown as b...

The problem we have is that the IPS is constantly at 100% CPU.This is how the network is connected:We have a 6500 on which we have a FWSM module and the default gateway for the FWSM (for internet) is on vlan 88.This 6500 is then trunked to another sw...

Hello, I have been given information on finding NAT translations from the CLI, but I was wondering how this can be done using ASDM.Also, when I do the xlat command in the CLI, why doesnt my PC's IP address show up even though I have made connections ...

I have several ports showing open on our ASA appliance when scanned by NMAP on the outside interface. However these ports are not configured open in the ACL that faces outside guarding against inbound traffic.The ports are 988, 993.Has anyone seen th...

I have some questions about "nat" "global" config and static mapping.If I have the following:interface 0/0nameif insidesecurity level 100interface 0/1nameif DMZ1security level 25interface 0/2nameif DMZ2security level 50interface 0/3nameif DMZ3securit...

We purchased the license upgrade for CS Mgr Enterprise Std-25 To Pro-50 Upgrade (CSMST-PR-U-3.2-K9) and I notice that this part number is specific to CSM v3.2, but in our end customer, the CSM's version is 3.1.1. I'd like to know if this license is c...

Hi,I'm trying to allow IPSec and L2TP VPN traffic through a IOS Zone Based Firewall. The router running the ZBF is NOT a vpn end point. It only needs to pass traffic from VPN clients behind the router to other remote routers.When I try to connect to ...

How do you physically install an ASA in transparent mode into a network? I know that the inside and outside interfaces have to be on the same network. My question is how does the firewall connect between users and servers when there is a switch that ...