Network Security

Hi,We configured FWSM in multicontext but without NAT/PAT under each context, we have added static routes on the MSFC for reachability of intside vlan under each context but somehow we can't ping from outside LAN to inside context/zone lans.We have c...

Hi Team,One small query--I have read somewhere that Routers are packet Filtering Firewalls(which can process the traffic at Layer-3 and Layer-4)but when we configure access-lists in routers ,then we can even mention the upper layer protocols(http,ftp...

I am attempting to access our ASA via ADSM. We are using ASA 8.0.4 and ADSM 6.1.3. When I web in using my https://<ip_address> and login, I receive a pop up window that says "ASDM cannot be loaded. Click OK to exit ASDM. Unconnected Sockets not imple...

This is an exersize in learning, and I'm getting stuck on the OSPF/Routing piece.What I am wanting to do is build a Lan-to-Lan VPN network between a 2811 and a 3005. Once that is done, inner routers at each site will run OSPF and should populate rout...

I have a vendor who uses an ASA at his end to build VPN tunnel to us. He gets the following error when he attempts to send traffic to us through the VPN tunnel. One thing to point out is that I am able to see his syn packet come to the destination ho...

Here is the config that I believe allows ASDM accesshttp server enablehttp 172.30.0.0 255.255.0.0 insidehttp 172.20.0.0 255.255.0.0 insidehttp 192.168.1.0 255.255.255.0 managementOur vpn dhcp pool is 172.30.0.xOur internal network is 192.168.133.xso ...

I wounder if there is any easy way one could monitor the bandwith on the external interface in regards to what ip is using what amount.This is for tracking who is using up the bandwith at a small ISP link when the link fills up.yes I know of fireplot...

Can I configure 'event action filters' from the CLI or do I have to use SDM?

Hi all,is it possible renew enrolled certificate placed in Cisco VPN client? I mean certificate is valid but for example it has 7 days to the end of validity and I don't want to enroll for a new one.We use MS CA to ask and issue cert. I didn't find h...

We are going to use QoS on our ASA 5500 firewall to prioritorise voice traffic over a 2 mb circuit between 2 locations. (There wil also be non urgent data traffic too). Using the ASDM GUI we can use match traffic (to various criteria) and get it appl...

Is there a log file or debug I can run on CSM to troubleshoot IPS signature update downloads from behind a proxy server? Error message varies from try basic authentication on Proxy server to bad checksum error on file.

Our End customer is trying to find OID using which Last Config Changes can be Tracked.Is there any OID that records Config change revision number or any such information.

Hi,I have a pair of ASA 5520s in active/standby with AIP-SSM-20 modules in each one...I upgraded one of the sensors this morning to 6.1(1)E3 from 6.0(5)E2, since I upgraded, I'm not able to get to large portions of the new version of IDM. I creates s...