Network Security

Our firewall currently blocks traffic destined for our VPN server based on TCP inspection.Essentially data traverses the VPN to a server on a remote subnet but on return it routes to the firewall and then back to the VPN. However the ASA rejects this...

I use to have a NetGear FVS338I installed ASA 5505 two weeks ago.This new firewall must have some timeout settings that the old NetGear didn't have.I use Microsoft Reporting Services on my webserver that is behind this firewall.I have a report that t...

We have recently installed a Cisco ASA 5510 to replace a Watchguard Firebox SSL VPN gateway. We configured the ASA for SSL connections with the AnyConnect client. Client connections authenticate and VPN tunnels are created successfully but throughput...

Hi guys,Anybody knows how to configure a PIX515e (ios 6.1) in transparent mode?And about rules to avoid DDOS and another things?Thanks

All -I have a Polycom VSX5000e located on an internal segment located behind an ASA5510. I have a static address translation for the video device. When an external video endpoint 'calls' our device (IP/H.323 and not SIP) we get ringing indication, bu...

Hi,I have SSM20 moudule cofigured on our ASA and would like to receive all the logs on a seperate server or file to review our security audit people.Even though IPS event viewer and getting events on IPS event page could not find a place to save.Can ...

HiSo I've setup the trial of the new Trend IOS Content Filtering and it seems to work as described, although I can't seem to find any way to get info about what is actively being blocked/allowed, short of running debugs of urlfilter on the router. I'...

I have 2 PIX 535 firewalls that operate in a LAN-based failover scenario, in Active/Standby roles. The licenses running on them are Unrestricted, on the primary unit, and Failover Only-Active/Standby, on the secondary unit.I tried to upgrade our dmz ...

Hi I configured a L2L vpn between two sitesOne in the HO --> ASA Version 7.2(1)One in the branch--> PIX Version 6.3(5)They are connected to each other via a private WAN provider(the ASA is connected via the DMZ-WAN interface)The "show Crypto isakmp s...

I am trying to lab up a config and I have a 5505 configured to provide IP addressing for RA VPNs and Anyconnect clients via a DHCP server on the "INSIDE" network. I also have other networks (VLANS) configured that need DHCP as well. I only have 1 dhc...

Hello everybody, wanted to ask, how would you block (or configure a particular policy to block) a particular application from being installed on a client machine... for example we do not want the user to be able to chat using MSN messenger or any oth...

Hi all,I am trying to upgrade the IPS with IPS-K9-6.1-2-E3.pkg from the current IPS-K9-6.0-4-E1.pkg. It failed and terminating via CIDS.Pls give the exact pre-requisites for this upgrade.Thanksswami

An ASA 5505 is setup at a client's contruction site to allow remote access to cameras thru port 6100. Client has single ip address associated with outside interface. Remote user can view site for approx 25secs, then connection drops and does not re-e...