Network Security

When I enabled PDM (so I can manage this guy via web), I noticed it keeps adding "PDM location" for every subnet/host/node etc to my ACLs. How do I stop it from doing that?Example:pdm location 10.10.10.2 255.255.255.255 insidepdm location 20.20.20.1 ...

All,What are the pros and cons of using a dedicated management interface for an ASA?Thanks,John

I have a Cisco PIX 525 with 5 interfaces. 1 is the outside interface with a public address, and there is another public network in the DMZ. Now there are no translations between the DMZ and outside as both contain routable addresses. Now I have creat...

I have running "FWSM Firewall Version 3.2(6)" and try to configure the logging timestamps in msec, like on IOS with "service timestamps log datetime msec localtime"Is there any possibility to do that ?

It seems that the latest official rdp,vnc, and telnet/ssh plugins (that is, the .jar files which have to be installed on ASA to provide clientless connection when inside webvpn portal) have some trouble when connecting machine runs jre 1.6U10 or late...

I went to do an er start and deleted the image and now can only go into romon> . I did not have a back up image so i downloaded the asa802-k8.bin file but now i do not know how to get the image back on the device. can anyone help?

Hi,we have simple NAT traversal configuration with an L2L tunnel lke this5505(8.0) -> DSL Router (NAT) -> Internet -> 5510 (8.0)The DSL Router gets a new IP every n hours.Configuration is like this:tunnel-group XXX type ipsec-l2ltunnel-group XXX ipse...

Hi, I would like to know what is the impact/loss of disabling stateful inspection on any protocol in the firewall such as 'no inspect sqlnet'. Is it a security threat etc ?

We have two locations, both with internet connections and both with Cisco PIX/ASA devices providing the internet. The two sites have layer 2 connectivity. The primary internet for both locations is out of site 2. How can we change over to use site 1 ...

I need to have sessions created in port 443 (ssl/https) to time up between 15 and 30 minutes, can I get a little help in the commands to acomplish this.Currently my ssh timeout display 60 not sure if that is seconds or minutes ?

I have an old PIX 515E that was taken out of storage. We want to use it in the lab, but no one can remember the login name or password or IP. Is there a way to set to default and start over?

I want to upgrade a failover pix 535 bundle with 6.3(3) to 7.2 but I do not have enough memory in the flash, can anyone tell me how to go about this. Also the flash directory layout is not clear. If I do dir flash or sh flash, the name of the files a...