Network Security

please see the attached pic, can someone tell ASA(FW1) can detect router1 outside interface down, which is in-direct link, and auto failover?

which Cisco ASA model-5510 or 5520 -would be suitable for a network with a 200 users?How is the sizing done normally?

I have PIX running 6.3 software with a few site to site VPN tunnels. Is there any way to monitor the bandwidth utilization of a particular tunnel? Same question goes with ASAs and using ASDM...no plans to get CSM here... Thanks, Jason

If I purchase SSL VPN license on ASA5500. Problem is I must purchase on Active Box and Standby BOX together. Or I can purchase only Active Box

Hi guys,Got an issue with a site-to-site vpn. Bear in mind this VPN is over our gigabit core network. Doing an scp from one unix box to another it shows us speeds of starting at approx 500KB/s and over about 10 secs goes down to about 200KB/s.We test...

Getting a FLOOD, huge flood of " reason: MSS exceeded, MSS 1300, data 1360" on Port 25running Pix 7.0.4 code.What is up with this? Have seen some of these in the past, but nothing like the 1 to 3 every second. I think someone is trying to run a SMT...

Error Message   %ASA-3-713042: IKE Initiator unable to find policy: Intf interface_number, Src: source_address, Dst: dest_addressExplanation   This message indicates that the IPsec fast path processed a packet that triggered IKE, but IKE's poli...

Hi,Has anyone of you guys configured Lan & stateful failover interface on a single physical interface with two subinterfaces dedicated for each?I am configuring 5520's in an Active/Standby mode and falling short on the physical interfaces...Pls advis...

I will be changing the public IP of the outside interface on my ASA 5510 (8.0(3). I have an IP Sec connection profile setup with users accessing our LAN remotely with Cisco VPN client. The connection profile uses a shared secret that is not changing,...

Hi,What I mean is I want to give a company access to an internal website and another company access to a different website, they can only access one website (bookmark)?Thanks

is there a way to set the IME to login on a per user basis?I have designated users that are to only have log viewing access. The IME login seems to be global. If I want to configure the IPS (4240), I have to login with the IDM. Is there some way to c...

Can we get some details on what this signatures is looking at? Does it do anything more intelligent than look at query throughput? I'm thinking something more along the lines of these Snort rules:#by many very smart people# This may be a high load s...