Network Security

I have an ASA 5540 with multiple context mode enabled. My monitoring host running opennms is behind one context, and hosts that it is monitoring are behind other contexts on the same asa. to get to the other contexts, traffic must pass through the dm...

Hello,What is the diference between theASA5505-50-BUN-K8 and ASA5505-SEC-BUN-K9.It is only a licensing problem or the hardware is diferent.Thank youlaszlo

Hi Guys,I understand that FWSM 4.X software support RHI to inject any static ,NAT Pool in to MSFC for severs behind Firewall.I have set up like this :servers------(a)FW-context(b)-----vrf----Idea is like this : The FWSM's have multiple interfaces. Th...

I'm setting up an ASA 5505 in transparent mode and can't pass layer 3 traffic between vlans. This is a simple config and I'm not sure why it's not working. Here's how I have the interfaces configured.int Vlan 100nameif INSIDESecurity level 100int Vla...

I have installed Cisco Security Manager 3.2.1 with RME 4.1.1, AUS 3.2.1 along with Performance Monitor 3.2.1 version on the same server.Iam able to add devices in RME, AUS and working fine with adding devices in CSM and able to discover the existing ...

Hi,I want to create a remote access VPN connection for a partner to our company IT resources. I have a failover system PIX 515E with 6.3(5) OS. PIX outside interface has RFC 1918 IP Address and is connected to a router witch in turn is connected to o...

hi.we using seperate fwsm between two 6509 chassis.fwsm is active/stanby.we want to upgrade os of fwsm.i would like to know how to upgrade the fwsm.after stanby fwsm is upgraded,do i have to upgrade active fwsm?thanks you.

i know means of below static natstatic (high, low) low highbut,i want to know means of below commandstatic (high, low) high highstatic (inside,dmz) 172.17.211.0 172.17.211.0 netmask 255.255.255.0

I'm having issues opening up a http connection between a host on one interface (higher security level) and a webserver on another interface (lower security level). The webserver is statically mapped to a public ip address, and the host is using inter...

The design is: 1. Perimeter ASA2. Front end servers (DMZ)3. FWSM on Cat 65004. Back end servers - includes customer & transactional database (DMZ 1) 5. Back end connectivity to another site for transactional processing & response which then updates t...

Hi all,I'm planning to migrate a CSAMC from 4.5 to 6.0 on the same machine. I understand that I need to upgrade firs to 5.0, than back-up the config, database etc and reinstall the whole system for 6.0. I'm not sure if I need to migrate my agents fir...

We are having an issue with a connection to a partner network. We have two Pix firewalls in Active/Standby mode (running 6.3(3)), the partner has two Pix 506E installed on our site that link back to their network. There are two cisco switches in betw...

I have a ASA 5510, I am looking to block all SMTP traffic to any domain other than our own (ie. gmail).How would I go about doing this?Would I configure an ESMTP inspect map? Or would this be easier to do simply by blocking DNS queries for these site...