Network Security

I am looking for an option to allow me using 'ANY' keyword for destination port on the extended access-list. With and without object-group, I don't see any such option on ASA. I can only see port-object range 0-65535 that can be used for this purpose...

cisco asa5505 how to upgrade

I use VPN Client 5.0.04.0300 to connect to a remote VPN network (ASA 5100) firewall. I can successfully login but I cannot access any resources (not even ping servers). Other collegues can do this from home and can even do RDP. I tried this both from...

All,I notice that the commands for Application Inspection differ between FWSM code version 3.2 and 4.0. Would this difference suggest that 4.0 does a better job at application inspection than version 3.2?

Hi i have a CSC-SSM module , after configuring the ASA to send the traffic to CSC module for scanning , i tried to download a file (its size : 5MB) . i noted that the downloading process started very very slow and after 30 seconds , the file was down...

I have a ASA 5540,and i have one ISP link connected to outside interface and now i want to connect one more 2 mbps another isp line to them is it poosible to connect with the use of extended 4ge ssm card.can a firewall support two ISP lines at a time...

Does anyone know what that means? I was trying to enable Anyconnect on my ASA 5520

All,I am trying to troubleshoot some network slowness behind a PIX 506E firewall running 6.3.3 This is the current "show interface" from the PIX and if I am reading this correctly the input queues are maxed for both interfaces. If that is the case is...

Hello.I'm in the process of replacing PIX with the ASA. I have configured RIP and have it working up to a point. I receive RIP updates from other devices, but unlike the PIX ver 6, the ASA does not send out default route info. Currently the PIX sends...

Please advise why are we getting Insufficient memory traps ?ALERT ID = 00000S4TIME = Thu 01-Jan-2009 14:35:37 ISTSTATUS = ActiveSEVERITY = CriticalMANAGED OBJECT = 10.10.xx.xMANAGED OBJECT TYPE = Switches and HubsEVENT DESCRIPTION = MEM-10.10.xx.x/1 ...

Dear Team,Whether doing Hide NAT(Hide behind IP or Hide behind Gateway) will automatically add two rules in the rulebase.For example If someone from internal network want to access external public IPInternal Network 10.10.10.1/24External IP:- 1.1.1.1...

Does somebody know how to deny a internal user to use logmein ? I'm talking about creating a custom signature to identify and then deny that kind of trafic.Thanks !