Network Security

Pls help! I configured Zone based firewall and here are a part of my config file:class-map type inspect match-any test match protocol tcp match protocol udpclass-map type inspect match-all sdm-cls--3 match access-group name Publicclass-map type inspe...

Hello, My company buyed an ASA5510-sec-bun-k9 but when I do show ver I have this output : asa707-k8.bin I am very surprised, I have to use PAK ?or I have to upgrade the image?Licensed features for this platform: Ma...

How I enforce all traffic coming through the ASA firewall to be forwarded to the Proxy server in the DMZ

I have ASA 5505 from my LAN i can ping internet devices but i cant Traceroute !!I tried everything i found in cisco:1- ACL: i allowed all kind ICMP , IP, UDP , TCP in Inside and outside2- ICMP Inspect3-set connection decrement-ttlmy lan device is U...

please I am having serious challenge at work. Our branches are experience high latency and slow link. They is need for urgent BW upgrade,but of course first,the management needs a comprehensive network monitoring and analsysis. They want to know who(...

Hi,We had the show object-group command in 6.x wherein we will able to get the hitcnts on the object groups. But in 7.x this is not available. The show access-list gives the hitcnt for object group but i am looking for some command which gives a si...

Hello I just unboxed my new ASA 5510. I have the task to configure this and install onto my network. Currently we are running a watchguard firewall x700. I will be replacing this with the ASA.I will be swaping this out and putting the new asa in. Kno...

I need to create a site to site vpn tunnel and was told that its not a good idea to specify the tcp ports on the associated acl. The reason had something to do with the stability or reliability of the tunnel. From a security standpoint, I would thi...

Is there a command that will display the matches or hit counts that have qualified against a "static" statement on the PIX or ASA?Thank You

Is it possible to use ASA 5505 to bridge two networks? I currently have two networks with two different IP addresses and would like to utilise the ASA to bridge between the two networks.I can't seem to find any information on this so would appreciate...

Hi guys ,I am facing some packet drops in LAN after implementation of FWSM context .Please let me know is there any configuration need to be done to avoid this ?Please suggest ..thanks in advance

How to avoid certificate warning message in NAC CCA Agent. Everytime when user login before authentication certificate warning message appears. Please advide how to bypass it.

I have a wierd situation at my customer site. PIX can ping some hosts on remote sites( hosts in the same subnet), but it can not ping others. It can ping default gateway of remote hosts. The next hop router can ping everything. Could it be sume bug i...

Hi,I'm looking to restrict VPN clients on the VPN Concentrator, to those that only have the Windows XP Firewall Installed.In order to do this, I need to select Custom Firewall and specify the Vendor ID and the Product ID.I'm struggling to find this i...