Network Security

hi fellowsas the title says, we have the ASA 5520 with the IPS module SSM-20 and the problem which i am facing is that on the ASDM In IPS main dashboard, the interface status showing that inside interface is Unpaired and outside interface is Manageme...

Hi All,I have ASA 5520 installed in network. This ASA is having SSM module with 4 gig ports.Can these ports on SSM module be utilized as normal interfaces of firwall? Is if , a saparate zone, for example DMZ1, can be introduce on the gig ports of SSM...

Dear Team,1.Why there is a need for setting SA lifetime.2.Whether SA will reset earlier if we have set an idle timeout for VPN tunnel.I mean if the VPN tunnel is idle for some amount of Time and if I have set the idletime out to be less than SA reset...

Hi team,We use static (inside, outside) IP1 IP2 where IP1 is the IP which is to be translated and IP2 is the IP which is translated.This command is used for accessing from outside to inside..Sameway if we want to access something from internal to ext...

Please correct me if I am wrong:-1.Client Mode is used when the users are sitting in Comany's internet network with Private IPs and will get NATed to public IP when accessing the Easy VPN server.2. We use Network Extension mode when we are accessing ...

Hi,I can't issue this command,FWSM(config)# int vlan 100Unknown interface vlan.Any ideas why?Thanks,vnt

Hi guys,I have a problem when try to connect two LAN (one ASA on each LAN)I have this error----%PIX|ASA-6-106015: Deny TCP (no connection) from IP_address/port to IP_address/port flags tcp_flags on interface interface_name.Explanation The security ap...

We currently have a Gigabit SONET ring between several locations. We also filter all traffic through an "outsourced" method and don't have our own internal firewall system. We run through this external provider and use a proxy to access the outside w...

Hi,I have an SR 520 router located at my remote site with public IP xx.8.140.226, and private IP 192.168.3.1.The central office is at public IP xx.60.101.154, and has a 10.1.1.0 scheme. I have a site to site VPN tunnel between the central and remote ...

We had to disable an account of an employee, but his vpn session stayed on. How can I ensure the vpn session is terminated when we disable accounts/change account passwords?Thanks in advance.

Hi all!I'm trying to configure an old Cisco 827 with my home dsl connection (12Mbps/1).Despite the fact that the 827 cannot take advantage of such speeds, there's something wrong with my config since I cannot download anything above 60Kbps once I app...

When i try to import a Certificate from a CA i get the error message as "Must include End Entity certificate". How do i create/generate a End Entity Certificate from Microsoft WIndows CA?

Hey guys/gals...I'm looking on cisco's upgrade software site, and i'm looking for the most current version of DFM. I see there is a SP1 (cwdfm3_1_1_win.zip). Is this all I will require? Is there not a baseline install, and then an upgrade to SP1??? o...

(I did dig up 5 bug's that might indicate high cpu utilization that you all might be interested in...TAC case next...)CSCsi40117/CSC-SSM6.0-01436100% CPU usageCSCsg82152/CSC-SSM6.0-01348 CSC jumps to 100% CPU usage, but new connections can be establi...