Network Security

Do I need to upgrade from 2.3 to 3.2 and then 4.0?Or can I directly upgrade to 4.0 and also the asdm file with tftp?And after copying the new software what we need to do is only reload? thx

Hi all,I would like to know if there is any kind of SNMP OID or SNMP TRAP to detect/inform the failover state of a ASA. The idea is to know what is the active/standby ASA in failover configuration.Thx in advance

Attached is my 1841 security router config. Simple question. Device 10.2.1.6 is my e-mail server & I want it staticly routed through the 65.103.52.172 address, such that when it sends outbound mail the recipients mail server sees it coming from 65.10...

I have a main site in USA and a remote site in the UK (w/ 3 users). I have a 5510 in the USA and will be installing a 5505 in the UK. I want to create a site-to-site VPN between the sites and direct all internet traffic from the UK through the 5510 i...

Having a bit of trouble understanding the simplicity of this error message. Browsed around and found nothing specifically related to the issue at hand. I ran the ASDM software and device/user/password box comes up. I type in my user/pass with the dev...

The outside interface on my ASA has been pegged now for about 4 days, just noticed it this morning. How do I find out who is hogging all the bandwidth??

Good morning.For auditing purposes, we need to log which commands where type into the ASA console, with user and time.Could you tell me which is the command? I can't find it... it has change from "Archive".This will also log the commands introduced v...

i created VPN termination on ASA and it is worked properly.when i add another exempt nat rule(nat0) for another IP through ASDM it doesn't work.

What is the best way to identify that a specific signature has fired on IDS/IPS 6.x that is feeding into a CS-MARS appliance?Would the easiest way to match "ANY" for Event Type and then do a keyword match? If so, what is it matching on, the signature...

Hi, We have installed ASA 5505 Firewall and the Application and DB Servers are hosted behind the Firewall and port 80 opened wordwide and everything is working fine and the ASA is connected with other remote Sites via IP-Sec Tunnel. We have a public ...

Hi, Can the CSC-SSM module be configured via CLI. Or only GUI can be used. Also is there any detailed configuration/Administration guide for CSC-SSM other than the document named "ASA: Send Network Traffic from the ASA to theCSC-SSM Configuration Exa...

I have a Pix 501 that is for management devices. The Pix is 10.100.0.1 and devices are in the same C class. These devices can ping any IP address I want yahoo.com, google.com etc. however can't resolve by NAME only IP. IE ping www.yahoo.com. If they ...

Hello all,I was just curious if anyone else has had many false positives with 3 signatures in particular: TCP Hijack (3250.0 - High), TCP Hijack Simplex Mode (3251.0 - High), and TCP Segment Overwrite (1300.0 - High). The reason I think they are fals...