Network Security

is the security rule in asa 5520 follow the same style with the acl in cisco 3000 and 4000 series switch where always acl is having implicit deny(so after any deny of any type we have to put permit ip any any)

hi guys, how can i check the logs during phase 1 and phase 2 negotiations in asa v8.0?

Hi,I'm new to ASA. Need some help to config the ASA Firewall. I'll be installing an antispam in the DMZ and a new Mail Server in the Tusted. As such, need to forward port 25 from the External IP to the DMZ's AntiSpam IP plus to allow port 25 from DMZ...

I'm a Windows user running 2003/ASDM 6/FireFox 3 without any problemsI'm just got hold of a new Dell notebook into which I'm planning to install Ubuntu for management apps and the likeI don't know a damn about Linux distros ... anyone running these v...

Hello All,I'm configuring two FWSm within the same 6500 chassis. I trunked a VLAN to the two modules.I created a SVI on the MSFC and created an interface on one of the two FWSM. Everything works fine I can ping MSFC from FWSM and FWSM from MSFC. On t...

Hi All, There are two ASA with failover and two switches, one internal switch and one DMZ switch. Both ASAs connected to two switches. Now we want to implement IPS here. we are using 4240 model. I want to use two inline interface pairs one for DMZ an...

As of Wednesday, our SSM IPS system starting picking up a large amount of hits against rules 3327/8, 5799/6, and 6131/6 (sig set 364). These rules are related to the MS Server Serivce, MS RPC, and UPnP services. All of these came from our VPN users i...

The LAN has 10.10.10.0/24 ip pool and ASA has 10.10.11.0/24 pool. When i connect to the ASA from the inside of the network , i can't get to any node in the network but i can when i am outside of the network. I need to connect to all nodes even when I...

how to write an acl with a line number but it should be before last deny statement??how to figure out and what is the syntax of the command?

Hi,I need to configure following:Source: 10.1.0.0/16, 10.3.0.0/16 and 10.8.0.0/16(NAT to 192.168.2.1)Destination: 172.16.2.2Service: RDP Could you please help me out by giving me the exact commands to run.ThanksVin

Hi,From Netflow Analyazer I can see a connection from an external IP to my ASA's outside interface that's been going for 2 hours and downloaded 3GB of data so far, how can I kill this conenction? It's a http connection.Thanks

Hello, anyone know any tricks to adding a sub int to an interface in an ASA without losing all of the references to the existing name? For example, we have a non-trunked interface "dmz1" that we need to turn into a trunked int to add another dmz, of ...

I have an acl with a defined time range. This works, but it seems that if a connection is enabled at the time, it doesn't break the connection when the time allowed is reached. Is this normal? Is it supposed to keep established sessions up, or is the...

Hi all,this is my situation: failover is off in primary unit and on in secondary unit. Now fwsm on the secondaty unit is working. If I activate failover on the primary unit, does it become active or not? If it becomes active, I think I will have some...

Hi, do you have experience of CSA agent and NAC agent together on the same pc ?Does one include the other ?Which one have I to test first ?thank you in advancegreatingsRS