Network Security

Hi all, when setting up transparent firewall, do we have to use different vlan on the interfaces? is this the same for the 5510 and 5520 ?

1) Can anyone confirm that the way to measure actively used "UC Proxy Session" licenses is to use the show phone-proxy secure-phones command in CLI? 2) If this is the right command, does this command's output increment if you use other non-phone prox...

Hi,I have an ASA 5510 just added to my network.I have an internet router(connecting to the outside interface of the ASA) and the following interfaces: inside,DMZ1 and DMZ2.I have the followings: LAN network connecting to the inside interface,server1 ...

I'm trying to resolve a routing issue with our VPN client connections to corporate site PIX firewalls and can't seem to figure it out. I connect all of our corprate sites with PIX VPN Site-to-Site links, staff in each remote office can connect to the...

I manage a 500-node LAN with several remote branch offices. We currently have two ASA-5520's in active/standby mode. All internet access funnels thru the home office. Our ASA's currently have 8 10/100/1000 ethernet ports, so integrated module is not ...

I have just started the process with migrating from PIX to ASA-platform. I have used to pixtoasa.exe-tool several times to convert my existing PIX-config to ASA 5520-config, this has been working ok. But after the last time I reset the ASA to factory...

I have a specific need on our ASA 5510 and could use some guidance.Currently our outside interface accepts SMTP from any source, via an access rule. NAT then forwards the inbound SMTP to an internal email gateway.I now have a situation where I have t...

Hi Everyone,I am about to build a new firewall'd infrastructure in which a significant amount of traffic will be running through it. I need to lock this firewall down as quickly as possible. Since there are no rules in place I will enable a “permit...

Hi There,I have a csamc 6.0 using an external ms sql 2005 server. We have been using the text filtering function for awhile now, but suddenly it is just getting the csamc to its knees when trying to search for ex. a specific executable file in the lo...

What cause this signature to trigger?I am not using any SQL services with host 172.19.107.55, scanned host for worm and never accessed this IP 203.161.77.136 from host.any suggestion?Event ID=1214348868918579818Severity Level=3Device Name=IDSM2CORE1R...

Hi,We are using AIP SSM in the promiscuous mode,And every thing seems to be fine.The only issue i am facing right now is that i cannot see the events which traffic comes from the outside to inside zone.Interesting traffic for IPS is "IP any any" and ...

I'm setting up a pair of ASA firewalls that will exclusively be used as VPN endpoints for about 75 tunnels. All traffic passing through it will be VPN traffic, to which none of it needs to be NAT'd. I'm running version 8.x on the ASAs. Nat-control is...

Hi,I am having an issue with auto update on the IPS module installed the ASA. Auto Update Statistics lastDirectoryReadAttempt = 06:00:34 UTC Wed Feb 23 2009 = Read directory: https://198.133.219.25//cgi-bin/front.x/ida/locator/locator.pl = Error: Aut...