Network Security

Hello All,I'm configuring two FWSm within the same 6500 chassis. I trunked a VLAN to the two modules.I created a SVI on the MSFC and created an interface on one of the two FWSM. Everything works fine I can ping MSFC from FWSM and FWSM from MSFC. On t...

Hi All, There are two ASA with failover and two switches, one internal switch and one DMZ switch. Both ASAs connected to two switches. Now we want to implement IPS here. we are using 4240 model. I want to use two inline interface pairs one for DMZ a...

As of Wednesday, our SSM IPS system starting picking up a large amount of hits against rules 3327/8, 5799/6, and 6131/6 (sig set 364). These rules are related to the MS Server Serivce, MS RPC, and UPnP services. All of these came from our VPN users i...

The LAN has 10.10.10.0/24 ip pool and ASA has 10.10.11.0/24 pool. When i connect to the ASA from the inside of the network , i can't get to any node in the network but i can when i am outside of the network. I need to connect to all nodes even when...

how to write an acl with a line number but it should be before last deny statement??how to figure out and what is the syntax of the command?

Hi,I need to configure following:Source: 10.1.0.0/16, 10.3.0.0/16 and 10.8.0.0/16(NAT to 192.168.2.1)Destination: 172.16.2.2Service: RDP Could you please help me out by giving me the exact commands to run.ThanksVin

Hi,From Netflow Analyazer I can see a connection from an external IP to my ASA's outside interface that's been going for 2 hours and downloaded 3GB of data so far, how can I kill this conenction? It's a http connection.Thanks

Hello, anyone know any tricks to adding a sub int to an interface in an ASA without losing all of the references to the existing name? For example, we have a non-trunked interface "dmz1" that we need to turn into a trunked int to add another dmz, of ...

I have an acl with a defined time range. This works, but it seems that if a connection is enabled at the time, it doesn't break the connection when the time allowed is reached. Is this normal? Is it supposed to keep established sessions up, or is the...

Hi all,this is my situation: failover is off in primary unit and on in secondary unit. Now fwsm on the secondaty unit is working. If I activate failover on the primary unit, does it become active or not? If it becomes active, I think I will have some...

Hi, do you have experience of CSA agent and NAC agent together on the same pc ?Does one include the other ?Which one have I to test first ?thank you in advancegreatingsRS

Hi all!Help! How can I deny port scan on the ASA. I mean when someone from outside interface begin scanning port of the host that is located in the inside interface.

Hi all I have two ASAs configured in Active/standby failover in single context mode .Is it possible to configure failover such a way that when Primary unit comes up after filover, it becomes automatically active ?Thanks in advance

Hi All,I had a very basic level question regarding using ASDM for an ASA5500 with a Security Services Module. When logged in via ASDM, I do not see an IPS tab/section. Could this mean that the SSM is not configured at all?Thanks in advance for any ...

I have a question about NATing I do not fully understand.Normally when I think of NATing an IP Address, I think in terms of the outside interface and public address subnet. If I have a server on the inside network and an available public address in m...