Network Security

Hi,We had the show object-group command in 6.x wherein we will able to get the hitcnts on the object groups. But in 7.x this is not available. The show access-list gives the hitcnt for object group but i am looking for some command which gives a si...

Hello I just unboxed my new ASA 5510. I have the task to configure this and install onto my network. Currently we are running a watchguard firewall x700. I will be replacing this with the ASA.I will be swaping this out and putting the new asa in. Kno...

I need to create a site to site vpn tunnel and was told that its not a good idea to specify the tcp ports on the associated acl. The reason had something to do with the stability or reliability of the tunnel. From a security standpoint, I would thi...

Is there a command that will display the matches or hit counts that have qualified against a "static" statement on the PIX or ASA?Thank You

Is it possible to use ASA 5505 to bridge two networks? I currently have two networks with two different IP addresses and would like to utilise the ASA to bridge between the two networks.I can't seem to find any information on this so would appreciate...

Hi guys ,I am facing some packet drops in LAN after implementation of FWSM context .Please let me know is there any configuration need to be done to avoid this ?Please suggest ..thanks in advance

How to avoid certificate warning message in NAC CCA Agent. Everytime when user login before authentication certificate warning message appears. Please advide how to bypass it.

I have a wierd situation at my customer site. PIX can ping some hosts on remote sites( hosts in the same subnet), but it can not ping others. It can ping default gateway of remote hosts. The next hop router can ping everything. Could it be sume bug i...

Hi,I'm looking to restrict VPN clients on the VPN Concentrator, to those that only have the Windows XP Firewall Installed.In order to do this, I need to select Custom Firewall and specify the Vendor ID and the Product ID.I'm struggling to find this i...

class-map Pol-Lon-Tunnelmatch flow ip destination-addressmatch tunnel-group lon-newyorkpolicy-map Pol-Lon-Tunnel class Pol-Lon-Tunnel priorityservice-policy Pol-Lon-Tunnel interface outsidepriority-queue outside tx-ring-limit 128 queue-limit 2048Gu...

hi,we are currently comparing cisco ips to tippingpoint, i have a cisco ips in front and tippingpoint in the back, so we are checking if cisco ips is missing on a lot of stuff , and currently it is missing on SQL injection attacks and cross scriptin...

hiI have a pis 515.suddenly its does not boot. when I pwer on its stop in PCI BUS checking..and I want go for ROMON mode then it prompts for pass 1, 2 check nothing come in.so its hardware related problem.thanksbiplob