Network Security

hi.we using seperate fwsm between two 6509 chassis.fwsm is active/stanby.we want to upgrade os of fwsm.i would like to know how to upgrade the fwsm.after stanby fwsm is upgraded,do i have to upgrade active fwsm?thanks you.

i know means of below static natstatic (high, low) low highbut,i want to know means of below commandstatic (high, low) high highstatic (inside,dmz) 172.17.211.0 172.17.211.0 netmask 255.255.255.0

I'm having issues opening up a http connection between a host on one interface (higher security level) and a webserver on another interface (lower security level). The webserver is statically mapped to a public ip address, and the host is using inter...

The design is: 1. Perimeter ASA2. Front end servers (DMZ)3. FWSM on Cat 65004. Back end servers - includes customer & transactional database (DMZ 1) 5. Back end connectivity to another site for transactional processing & response which then updates t...

Hi all,I'm planning to migrate a CSAMC from 4.5 to 6.0 on the same machine. I understand that I need to upgrade firs to 5.0, than back-up the config, database etc and reinstall the whole system for 6.0. I'm not sure if I need to migrate my agents fir...

We are having an issue with a connection to a partner network. We have two Pix firewalls in Active/Standby mode (running 6.3(3)), the partner has two Pix 506E installed on our site that link back to their network. There are two cisco switches in betw...

I have a ASA 5510, I am looking to block all SMTP traffic to any domain other than our own (ie. gmail).How would I go about doing this?Would I configure an ESMTP inspect map? Or would this be easier to do simply by blocking DNS queries for these site...

Hi, allWe have an ASA 5510 firewall, and we plan to change its power cable and power off it. How do I save its current running configuration to avoid its currnet running configuration lost?Thank you!

Hello,I have just installed a pair of FWSM in two different Catalys 6509 in HA mode.I left every access-list completely opened for test purposes. The stations connected to any inside interface can communicate with any other inside or outside station....

HeloWe update fwsm acl's by editing textfiles (partial automatically) (with 'clear configure access-list <>' in the top and 'access-list commit' in the bottom)and then tftp'ing them to the fwsms. However scripting this process with 'Expect' has cause...

Like IDSM, it there also a CSC-SSM functionality within FWSM ?

I am the admin of the Cisco VPN Concentrator 3030, we have a customer that is trying to set up an L2L to our concentrator.I have set up the L2L config unider Tunneling& security/IPSEC/Lan-to-Lan.When the customer connects the Phase 1 passes as well a...

Last night I put a new ASA5510 in place of my PIX515e. Everything went very well except for VPN connections. We are keeping the legacy VPN client for now and transforming to CLientless SSL in the future. Users can login through VPN and get the NAT po...