Network Security

I've got a new 5505, and I've run through two wizards: one to start up, one to add client VPN. As a result, I can now connect from a client, the client gets the right info (ip adress, dns, gateway), but it cannot connect to any of the servers on...

I have IPS 4255, I have made a Service HTTP signature to block metacafe.I have configured the block device for PIX Firewall. Signature triggers when i open www.metacafe.com i can see the user IP in active blocking hosts and also in IP logging but sti...

Dear,During a cisco ASA 5510 cluster migration this weekend, we experienced 2 times this error on the moment of writing the configuration to the startup-config file of the Cisco ASA primary cluster node. After this error we noticed that the startup-c...

Hi All, Hitting my head against a wall with this any solution would be greatfully recieved.Basically I have a server on VLAN x connected to a 11500 CSS which is connected to the ASA on VLAN y. The CSS is creating a VIP on VLAN y for web traffic but...

I have an IPS 4240 installed in between my customers Outside Firewall and his Internet Router.I have been receiving excessive Alarms from the IPS with respect to a match on signature ID:1300/0. This is allegedly a TCP Segment Overright. The addres...

Hello, we recently bought a pair of ASA5520, we plan to replace our old Pix firewalls. ASA and multiple contexts are new to us. We've upgraded the firmware to the lastest ASA 8.04, ASDM 6.1(3). We've configured failovers, the firewall accesses are wo...

Hi,I have a Pix 515 and wondered what files I need to update it to the latest firmware, I think I need 2 files.Also I want to use the PDM or ASDM to manange it (along with the cli), would I still use the PDM or ADSM for later version of firmware?Than...

Is it possible to have easyvpn spoke vpn pix501 clients talk to each other with a 3000 concentrator in the hub?Need to have IP phones call each other.

Hello,Is it possible to get RDP access to a Server by connecting to ASA via SSH or telnet

I have an easyvpn tunnel from a 501 to a 515. I have multiple vlans on layer 3 switch at 501 location. Is it possible to get all networks at remote branch to tunnel through easyvpn to 515 main site?I am using split tunneling. I have added the second ...

I have two mail relay servers (running brightmail) in our DMZ which accept inbound and send outbound mail. Everything works fine and has been working fine for a long time. However I do see a lot of Denied traffic from these servers, sourcing on por...

Hi,Can anyone help me out with this configuration please, I firsly wish to know if this config is secure, secondly how I can allow access to a webserver located on the private side with address 10.99.1.1 and thirdly why the download speed is so slow,...

I setup an interface on my ASA5520 to be a guest network so visitors of our company would have access to the internet. However, I'm not able to get DHCP working properly. If I hardcode the settings, everything works fine. Can someone look at this ...

I've set the inside 172.17.193.x/24 cisco catalyst switches to sync with an outside time server 66.96.30.91.I'm getting the followingBuilt inbound ICMP connection for faddr 66.96.30.91/0 gaddr x.x.x.x/0 laddr 172.17.193.52/123Teardown ICMP connection...

Has anyone experienced the dialog box for entering network password continuosly poping up every minute or so (When logged into the ASDM on a firewall). If so, please instruct me on how to get pass this annoyance. We use TACACS+ with RSA tokens, so ...