Network Security

Previous posts said to use "clear configure <acl_name>" but that command doesn't exist in 8.04. Is there a new command?

I have a tunnel established site to site and the only way we can get it to negotiate is for the ISA site to ping the ASA site. At that point Im able to ping his internal and vice versa but after a few minutes of no activity the connection drops and h...

Good afternoon,Anybody knows about a solution like "Static Route Tracking" to use in a ASA 5520?I tried to use track, but ASA5520 didnt recognize this commandI need something like this:route outside 192.168.1.0 255.255.255.0 10.10.0.1route dmz 192.16...

Hello,We have an ASA 5510 running in a DMZ that is the DMZ firewall for our wireless network. We have added a new VLAN to the network to accomodate more users on the wireless network. This new VLAN for some reason cannot receive IP addresses from the...

How do I receive the alert message from IPS AIP SSM10?

All of a sudden our Port 25 and 443 access went out on our ASA. When trying to connect from the outside we're getting this error. We just need to verify that it's in fact Hardware and not something in the configuration even though the configuration h...

Hi We use Cisco VPN 3000 for remote access using VPN client. Do I really need to use Cert from Verisign for my public interface? We don't use WebVPN but even though we use do we really need that cert? Please advice.ThanksT

I have a strange error appearing on a pix 515 serial console:rocess_create: out_of_memory when i try to connect through ssh or telnet.

Before I restart the ASA, here is my problem....I can log into the ASA, ASDM with no problem, however when i try to connect to the IPS through ASDM is says "error connecting to sensor. Error Loading sensor"....Any ideas? I want to make rebooting the ...

Is there a command to allow a range of ports or all ports to pass through? I can allow individual ports with an eq statement (eq smtp, eq 3389, etc.), but I need to allow a wide range (or all)from one specific IP address through to one specific serve...

I have never configured AIP-SSM and looking for a how to guide that is short and to the point... any one got one??

If I am configuring an ASA to pass IPSEC vpn traffic, and I don't want to NAT anything traversing from the inside out, nor am I NATng anything coming in, should I be using NAT exemption vs Identity NAT?nat (inside) 0 0.0.0.0 0.0.0.0 oraccess-list no-...