Network Security

Anyone have any experiences or opinions on running 8.x code on an ASA firewall pair that will have about 80 IPSEC tunnels on it? We have to migrate from our old 3000 series concentrator. The allure of the 8.x code is the ability to debug a single tun...

Hi all,Can you tell me what is a good book about ASA to study?What should you recommend?Thanks

Do not have a Pix at hand to test so I willask with this given scenario:1- What ports must be open on the Pix inorder to allow ftp over SSL to work properly?2- Is it possible to allow ONLY passive FTP through the Pix firewall in this given scenario?T...

Following is a lab topology:I cannot ping from interent(LAB) router to the inside interface of pix as well as lan.ALso cannot ping outside interface of Pix from lan but can ping the system on internet(LAB) .Can anyone help .Thanks in advance. system ...

We just started using the ASA 5510 with the CSC module. We have a development Webserver in DMZ. From within the LAN we see a lot of broken images when accessing web pages on the development web server in the DMZ and Web pages outside our network. The...

Is there anyway to configure an ASA to make it possible for AnyConnect SSL clients to be able to traffic over IPSec tunnels to remote networks. The IPSec tunnels are configured on the outside interface, which is the same interface that the SSL client...

Hello, I need advice on how to setup DMVPN for the following scenario DataCenter#1 DataCenter#2 Branch-Office#1 Branch-Office#2 Branch-Office#3 DC#1 is connected to DC#2 via MPLS using BGP BO#1 is connected to DC#1 with GRE Tunnel over IPSEC (( Routi...

Hi Guys,I am having some problems with csa 6.0 and a software deployment tool called capainstaller, it resides on the client and picks up packages on some server shares and executes them from there, or copies it locally. We have added it to the class...

I am just wondering whether following Site to Site VPN configuration scenario will work.ASA--Internet RTR ---Internet Cloud --Internet RTR --ASA Where ASA is outside interface will have the private IP Address. But internet Router at both side will ha...

I see a lot of these messages, maybe hundreds per minutes. I feel this is not normal, but can never find any convincing information either way. Can anyone elaborate?

I'm seeing some weird logging behavior on an ASA5550 active/standby pair (Internet facing, running 7.2.4). As you can see from the example below, it is logging a number of denied messages for a normal (allowed by policy) TCP session. Jul 16 2008 09:2...

I have a Pix with a blank running config, I can load the 7.2 from Monitor mode OK, when I try to then get the 7.2 .bin file tftp-ed to the PIX and saved in flash it gives me a "no route to host" errorPix E1 172.23.4.125 255.255.255.0laptop 172.23.4.1...