Network Security

Hi,Does anyone have experience with creating location aware policies in CSA? I'm trying to create a policy which contains 3 location aware rule modules.Is there a limit on the number of location aware rule modules that can be a used in a policy?The r...

I have a functional ipsec tunnel between a PIX 515 and an ASA 5510 with version 7.0(7). I'm trying to replace that PIX 515 with an ASA 5510 with version 7.0(8). The configuration seems consistent to me, with the exception of the security-associatio...

Hi,I am looking at the logs in the ADSM and I get the following set of lines (at the bottom). What is supposed to be happening is that software on VISTA_CCTV on the inside is to talk to an internal address at 88.88.88.88. VISTA_CCTV -- [ASA] >>>INTER...

Recently we've introduced Websense to our environment and I am using a spanning port on the core switch to force all traffic destined to the Internet to go through websense, that works very well.The problem we have now is that Remote Access VPN users...

We've had some issues using the pix migration tool to get our current config over to our new ASA. Are there any general recommendations out there for doing a conversion from a PIX to an ASA?Thanks!

How to do a cluster with CSA MC.I have 2 server, and want that is the first CSA fall, then the second take the hand and all All agents register to the second CSAMC till the first comme back.Is there any issue or any link about documentation?Best Reg...

Hi, I'm getting error "It is not a qualified file to be executed" when I try to launch a executable program through the CCAAgent Stub for a non-admin user.I have created certificated, signed and all those procedures are done. Still getting the same e...

Hi,is it true that we can only use supported ftp servers that are documented in cisco for updating ips signatures or image?###cisco ips 6.x document ####The following FTP servers are supported for IPS software updates:• WU-FTPD 2.6.2 (Linux)• Sol...

I am able to get some websites to come up, but after a long time loading. Here is my config. What am I missing? I am able to RDP inside to the server named xxx-SQL01 and use ASDM and telnet to manage the firewall. The connection stays up fine, I ...

Hello all,I'm trying to get working NAC Appliance 4.5 with WS-C4506-E with MAC notification without any luck. It seems that C4506 detects a MAC change, sends a SNMP trap to NAC Manager and according to what I was able to sniff directly on NAM via tcp...

FWSM in multi context mode and routed mode.I'm coming from checkpoint world and there we have VRRP gateways we handout to clients/servers. Going through a config guide for FWSM I see the following.My quiestion is which address will be handed out to t...

Hi,We are using HPDeskjet printer inside the firewall and unable to access from outside for sharing the printer.please let me know which port has to open form oute side to inside ?Rgs,