Network Security

I'm setting up an ASA 5505 in transparent mode and can't pass layer 3 traffic between vlans. This is a simple config and I'm not sure why it's not working. Here's how I have the interfaces configured.int Vlan 100nameif INSIDESecurity level 100int Vla...

I have installed Cisco Security Manager 3.2.1 with RME 4.1.1, AUS 3.2.1 along with Performance Monitor 3.2.1 version on the same server.Iam able to add devices in RME, AUS and working fine with adding devices in CSM and able to discover the existing ...

Hi,I want to create a remote access VPN connection for a partner to our company IT resources. I have a failover system PIX 515E with 6.3(5) OS. PIX outside interface has RFC 1918 IP Address and is connected to a router witch in turn is connected to o...

hi.we using seperate fwsm between two 6509 chassis.fwsm is active/stanby.we want to upgrade os of fwsm.i would like to know how to upgrade the fwsm.after stanby fwsm is upgraded,do i have to upgrade active fwsm?thanks you.

i know means of below static natstatic (high, low) low highbut,i want to know means of below commandstatic (high, low) high highstatic (inside,dmz) 172.17.211.0 172.17.211.0 netmask 255.255.255.0

I'm having issues opening up a http connection between a host on one interface (higher security level) and a webserver on another interface (lower security level). The webserver is statically mapped to a public ip address, and the host is using inter...

The design is: 1. Perimeter ASA2. Front end servers (DMZ)3. FWSM on Cat 65004. Back end servers - includes customer & transactional database (DMZ 1) 5. Back end connectivity to another site for transactional processing & response which then updates t...

Hi all,I'm planning to migrate a CSAMC from 4.5 to 6.0 on the same machine. I understand that I need to upgrade firs to 5.0, than back-up the config, database etc and reinstall the whole system for 6.0. I'm not sure if I need to migrate my agents fir...

We are having an issue with a connection to a partner network. We have two Pix firewalls in Active/Standby mode (running 6.3(3)), the partner has two Pix 506E installed on our site that link back to their network. There are two cisco switches in betw...

I have a ASA 5510, I am looking to block all SMTP traffic to any domain other than our own (ie. gmail).How would I go about doing this?Would I configure an ESMTP inspect map? Or would this be easier to do simply by blocking DNS queries for these site...

Hi, allWe have an ASA 5510 firewall, and we plan to change its power cable and power off it. How do I save its current running configuration to avoid its currnet running configuration lost?Thank you!

Hello,I have just installed a pair of FWSM in two different Catalys 6509 in HA mode.I left every access-list completely opened for test purposes. The stations connected to any inside interface can communicate with any other inside or outside station....

HeloWe update fwsm acl's by editing textfiles (partial automatically) (with 'clear configure access-list <>' in the top and 'access-list commit' in the bottom)and then tftp'ing them to the fwsms. However scripting this process with 'Expect' has cause...

Like IDSM, it there also a CSC-SSM functionality within FWSM ?