Network Security

I'm running IOS firewall on 2 different routers. A 2851 and a 2821. Both are running 12.4(3g) Adv Sec images. Both routers are connected to an internal WAN and also to an external ISP such as a cable modem. They also have LAN interfaces. Default gate...

Hi !!Is it recommended to use windows external database for ACS Authentication

I am trying to connect to a 4255 sensor with IDM,but am unable to do so. I get the following error "Error connecting to sensor.Failed to load sensor.- Error getting config data from the following modules:sshKnownHostsExiting IDM"Anyone know why and h...

I'm pulling the configs off our old 515 firewalls and putting them on our new ASA 5500's. On the 515, we were NATng everything inside to a public address tied to the outside interface (not the interface address itself). Here is the config for the ins...

HiWhy can I telnet through the PIX when there is no reference to telnet in the class inspection default list or in the default inspection traffic list? I see there is a reference to ICMP so that explains why transit pings do not work, but I can^t get...

Hi, I currently have an ASA5540 with the following setupInterface A inside1Interface B outside1Interface C Outside2.I currently have failover setup for connection tracking the Outside1 interface now recently my ISP had some issues and had to redirect...

I have not had any luck locating the boothelper file to update the pix 520 from 5.0 to 6.anything. I have a valid CCO account and have searched and cannot locate this. Anyone have any idea where I can find the boothelper, or a workaround to update th...

hi, I have a customer who has upgraded from pix520 to asa 5520 with csc modul in march 2007. now the customer has a second asa 5520 with csc modul. today we are going on with the failover configuration and now we have a big problem... I tested the hi...

We have 2 sites seperated by an ASA 5520. There are some servers on one side of the ASA which are hosting IRC (Internet relay chat) and SSH service. The clients for both services are on the other side of the firewall.We are often seeing two issues:(A...

So I was trying to configure an ASA 5505 with both dynamic NAT for PC users to reach the internet and static NAT to reach servers behind the ASA. PC users work ok although they could not ping out which is odd.But the real problem is that I set up som...

Hi,I have add the "ip verify reverse-path interface <interface name>" to all my interfaces on my ASA, the syslog alerts I'm getting now are:Deny UDP reverse path check from 192.168.1.1 to 192.168.2.2 on interface DMZ2Deny ICMP reverse path check from...

I'm getting ready to move our VPN connections from the VPN Concentrator to our ASA which is also our internet firewall. My question is, does it make sense to connect one of the ASA's unused ports to the DMZ and use that as the VPN port or just config...

Hello All,I was wondering if anyone has made practical uses of the ASA's Modular Framework Policy, especially in creating customized inspection engines via creating inspection-policy maps and matching regex expressions in the inspection-policy. How d...

Hi Can I install CSA MC and LMS Applications on the same hardware server. Regards/Asfar