Network Security

Hi,I have a Cisco ASA 5520 with a few VLAN's (DMZ's).Under every Interface I have added the ICMP any any rule and tracerts work fine from the VLAN's (which are on a 3750 trunked of the ASA) to the inside interface and visa versa.The only tracerts I c...

Hi Friends, I'm new with Cisco ASA/PIX, in fact i'm new in networking, when i'm triyng send this line to the PIX i get this message error, when i try to creane a nat in the inside with the access list no-nat ERROR: access-list has protoc...

Have a remote site that is changing ISPs, I need to change the outside interface IP Address / Subnet Mask and the ASAs default gateway, how can I change all three remotely at the same time?

Hi ,We are using pix 515E with IOS version 6.3 3 with the serial failover From the PIX we have established a VPN to our head office which as the two ISP connected in this condition we already have VPN but in case of the primary ISP down we have failo...

I passed a PCI security scan from our vendor a couple weeks ago but this morning I got an email that we are now failing. the Failure is listed as:"It was possible to make the remote server crash using the 'nestea' attack. An attacker may use this fl...

Hi,I have an issue with my ASA where if i point a default route from the WAN router to the firewall i get incomplete arp records on the router and i cant get to anything behind the firewall. But if i put the specific statics in to the subnets behind...

Hi,I need to computers (on different VLANS) but pointing to the FW to connect via specific tcp ports. I'm getting this syslog message.106015 Deny TCP (no connection) from 192.168.167.64/1433 to 192.168.167.80/1796 flag SYN ACK on internal interface.S...

Greetings, we have recently been approached by a client who has aquired a PIX520 (6.3) and wishes to sit 2 networks behind it with one outside network terminated on a leased line.They would like to route traffic between the two internal subnets on th...

Good Day,I have seven subnets that previously used public IPs exclusively w/helper addresses configured on a router that I *do not* control.We recently installed an ASA 5550 to do nothing more than perform NAT for five on the subnets, the other two r...

I'm configuring NAC requirements at the NAC Manager and want to use Russian language in the Description field, to display user PC check problems at Russian language.By default, Clean Access Agent display text using Win1251 encoding (as I understand)....

Hi,I have just purchased a brand new IPS module for my ASA5510.However, I am unable to login and cannot get started .... I see this error "Authentication token manipulation error" see below:ASA5510# session 1Opening command session with slot 1.Connec...

having a Brain Cramp here. I need to See the hit counters on my ACL's on my ASA. But I need to see them Line by Line and only a couple of them. Can some one show me the command to just see specific lines in the ACL.thansk