Network Security

The outside interface on my ASA has been pegged now for about 4 days, just noticed it this morning. How do I find out who is hogging all the bandwidth??

Good morning.For auditing purposes, we need to log which commands where type into the ASA console, with user and time.Could you tell me which is the command? I can't find it... it has change from "Archive".This will also log the commands introduced v...

i created VPN termination on ASA and it is worked properly.when i add another exempt nat rule(nat0) for another IP through ASDM it doesn't work.

What is the best way to identify that a specific signature has fired on IDS/IPS 6.x that is feeding into a CS-MARS appliance?Would the easiest way to match "ANY" for Event Type and then do a keyword match? If so, what is it matching on, the signature...

Hi, We have installed ASA 5505 Firewall and the Application and DB Servers are hosted behind the Firewall and port 80 opened wordwide and everything is working fine and the ASA is connected with other remote Sites via IP-Sec Tunnel. We have a public ...

Hi, Can the CSC-SSM module be configured via CLI. Or only GUI can be used. Also is there any detailed configuration/Administration guide for CSC-SSM other than the document named "ASA: Send Network Traffic from the ASA to theCSC-SSM Configuration Exa...

I have a Pix 501 that is for management devices. The Pix is 10.100.0.1 and devices are in the same C class. These devices can ping any IP address I want yahoo.com, google.com etc. however can't resolve by NAME only IP. IE ping www.yahoo.com. If they ...

Hello all,I was just curious if anyone else has had many false positives with 3 signatures in particular: TCP Hijack (3250.0 - High), TCP Hijack Simplex Mode (3251.0 - High), and TCP Segment Overwrite (1300.0 - High). The reason I think they are fals...

Hi, Is it possible to access the CSC-SSM module via the ASA backplane after assigning the IP to the management ports of ASA and CSC-SSM. Or is it required that both the management ports are physically connected to the network and the communication be...

Hi,I have a doubt with respect to Trunking in ASA 5520. Is the below possible:-Two sub interfaces in one vlanint g0/1.1switchport access vlan2int g0/1.2switchport access vlan2interface vlan 2nameif blahip 1.1.1.1 255.255.255.0sec 20no shinterface g0/...

Hello,I'd like to add a DNS Suffix to the hostname of my CSA-MC. But the CSA software doesn't notice and carry on with only the hostname and not the FQDN. It means, the Agent where there's no DNS suffix configured can't reach the CSA-MC.Is there a wa...

Is there a way to block logmein on the ASA?

Hi Security gurus,I was trying CBAC in 2691 router in Dynamips.I created some telnet connections through the router configured with ACLs & 'inspect' statments then looked at output of "show ip inspect session detail" command.It tells me which ACL was...