Network Security

Hi all,I have seen this a lot with routers and PIXs. Traffic with a source port of port 80 and destination of a dynamic port is denied on the outside interface.The traffic is from legitimate web servers that users are browsing through the NATed inspe...

I have a Cisco 5510 that has a DMZ setup on it and supports Remote Access via the legacy client, not web or SSL. While on VPN I can get to all internal resources, have no problems. However I cannot conect to any resouce in the Dmz. I've look at the N...

Hi,I was reading CSCse92254 Bug Details and it says that ASA OS version 8.3 is released. I quote part of the bug detail as follows "- IKEv2 is a much better solution and will be implemented both on the AnyConnect Client and on the ASA. Dates have not...

Hello,I am reading through the ASA 8.x release notes for a potential upgrade. Currently, a device is running OS 7.22 and ASDM 5.22. It has 256DRAM and 128 MB flash. I think the confusing area is the amount of flash I need. I keep reading I need t...

Dears,As we know in Routers, we create a local Username/password and configure the vty line with "privilege level 15" command and the user will go directly to priv mode.how can we do this in ASA/FWSM??? I have done AAA and also Local U&P, the users g...

hi there,ive recently set up the CSC SSM module on an ASA5510 and when i try to the updates from Trend Micro, it says it cant connect. can someone explain how you would set the management network (192.168.11.0/24) to access the Internet?Regards

Hi,We are using PIX 515E Firewall and right now we are planning for the redunancy in our firewall so can any one help me how i can deploy the new Firewall for redunancyAnd also procedure for deploying redunancy on the FirewallRegards,Vinu

Hi,Is it possible to change the ssh port banner banner on the ASA 5505 from Cisco SSH 1.25 (protocol 2.0) to something else

I have a customer with an ASA 5505 which works quite well with the one WAN outside interface connected to my ISP and the Internet and the inside interfaces connected to my LAN 192.168.19.xThe client has installed a second high-speed (& expensive) WAN...

Hi,I have managed to succefully connect to an external user using RDP, VNC, however I communicate with a few clients through MSN, it has this great feature for the client to ask for help and let me "shadow" their desktop, however this doesn't work.I ...

What is the best way to do the upgrade from 6.3(5) to 8.0(4)? The way I am reading it I am supposed to upgrade to 7.2 first and then upgrade to 8. Also, I need to do everything in monitor mode since I have PDM installed on the boxes correct? I did...

Hi All,I have been racking my brains and no doubt am further from the answer now than when I started. I have two 5510s in a/s working fine but cannot get a response from ASA to client once the vlan on ethernet0/2(2.2) pinged (from ASA).Int 0/2 vlan 2...

I've upgraded our 6.3(5) pix to 7.2 and lost one VPN to our branch office.They have a 2600 IOS router. And I cant find the issue and need some help please.2600 config:Protection suite of priority 20 encryption algorithm: Three key triple DES...

Hello, I am again having another problem with my NATTED ip. We have connected a server on one of the Firewall interface. I can Ping the server 10.26.34.20 from the Firewall context at the same time, I can ping the 10.10.10.10 server from the firewall...