Network Security

I'm seeing some weird logging behavior on an ASA5550 active/standby pair (Internet facing, running 7.2.4). As you can see from the example below, it is logging a number of denied messages for a normal (allowed by policy) TCP session. Jul 16 2008 09:2...

I have a Pix with a blank running config, I can load the 7.2 from Monitor mode OK, when I try to then get the 7.2 .bin file tftp-ed to the PIX and saved in flash it gives me a "no route to host" errorPix E1 172.23.4.125 255.255.255.0laptop 172.23.4.1...

I have a client that requires an ASA front-end firewall that will pass all traffic to an ISA Server setting in front of the corporate LAN. There will also be a SPAM filter in the ASA dmz accepting all email and passing it through ISA to the mail ser...

I'm prepping for a possible Vista/Windows 7 rollout and I'm trying to find any information about Vista comptibility with a Pix 515E. So far I am unable to connect to the VPN that is setup on the device from any Vista PC (XP works great) and I have b...

Hi, I have an ASA 5505 running 7.2.(4). I have a dmz configured which can access the outside via the implicit rule to permit all traffic to less secure networks. When I try to apply an access-list on the dmz interface to permit https access to a serv...

Is there any backup option on the Asa 5505 firewall? Or any backup option for the asa 5505

Hi.This is probably a really simple one but can you ping the outside interface of a PIX/ASA from teh inside network?It seems to be blocked or disallowed by default, but does anyone know how to get around this.Thanks.

Hi,I just need someones advise on the adding a NAT exempt rle on my ASA 5520.If I add an exempt from an IP to another IP it works, if I add a NAT exempt for a group name to a group range it won't work.I am using the ASDM and I have created a group fo...

Dear all,i spoke for a friend which problem i heard in the last days.he installed a new location and the vpn is woking well, from the cleints in the local lan he can connect the tftp server in the headquater. but when he is on the asa via ssh (connec...

Dear All,I would like all of you to help me to solve the problem as below:On ASA i had Outside,Inside and DMZ.i had one webserver in DMZ and i had 2 application server in Inside( one primary and other one Bakcup).so i want to allow some port from DMZ...

we have a main site that contains (1)CAM and (1) CAS and 250 users. we have 5 remote sites that connect to an ASA 5520 via DSL point to point VPN connections. There is no internet at these sites locally, they all access the internet through the main ...

I am trying to find out if CSM version 3.2.2 will support Sensors running 6.1 and up ?? At this time CSM 3.2.1 cant be used to update sensors to 6.1 and up.Thanks,