Network Security

I am trying to connect to a 4255 sensor with IDM,but am unable to do so. I get the following error "Error connecting to sensor.Failed to load sensor.- Error getting config data from the following modules:sshKnownHostsExiting IDM"Anyone know why and h...

I'm pulling the configs off our old 515 firewalls and putting them on our new ASA 5500's. On the 515, we were NATng everything inside to a public address tied to the outside interface (not the interface address itself). Here is the config for the ins...

HiWhy can I telnet through the PIX when there is no reference to telnet in the class inspection default list or in the default inspection traffic list? I see there is a reference to ICMP so that explains why transit pings do not work, but I can^t get...

Hi, I currently have an ASA5540 with the following setupInterface A inside1Interface B outside1Interface C Outside2.I currently have failover setup for connection tracking the Outside1 interface now recently my ISP had some issues and had to redirect...

I have not had any luck locating the boothelper file to update the pix 520 from 5.0 to 6.anything. I have a valid CCO account and have searched and cannot locate this. Anyone have any idea where I can find the boothelper, or a workaround to update th...

hi, I have a customer who has upgraded from pix520 to asa 5520 with csc modul in march 2007. now the customer has a second asa 5520 with csc modul. today we are going on with the failover configuration and now we have a big problem... I tested the hi...

We have 2 sites seperated by an ASA 5520. There are some servers on one side of the ASA which are hosting IRC (Internet relay chat) and SSH service. The clients for both services are on the other side of the firewall.We are often seeing two issues:(A...

So I was trying to configure an ASA 5505 with both dynamic NAT for PC users to reach the internet and static NAT to reach servers behind the ASA. PC users work ok although they could not ping out which is odd.But the real problem is that I set up som...

Hi,I have add the "ip verify reverse-path interface <interface name>" to all my interfaces on my ASA, the syslog alerts I'm getting now are:Deny UDP reverse path check from 192.168.1.1 to 192.168.2.2 on interface DMZ2Deny ICMP reverse path check from...

I'm getting ready to move our VPN connections from the VPN Concentrator to our ASA which is also our internet firewall. My question is, does it make sense to connect one of the ASA's unused ports to the DMZ and use that as the VPN port or just config...

Hello All,I was wondering if anyone has made practical uses of the ASA's Modular Framework Policy, especially in creating customized inspection engines via creating inspection-policy maps and matching regex expressions in the inspection-policy. How d...

Hi Can I install CSA MC and LMS Applications on the same hardware server. Regards/Asfar

Hi,The following logs I am getting in my ASA.x.x.x.x L2L VPN peer IP (remote end)We are getting this log whenever tried to call remote end (IP Telephony). We can able to hear our voice but they can't.3|Sep 16 2008|13:33:18|713902|||Group = x.x.x.x, I...

When using the ASDM I go to monitoring > routing > routes but there are no routes listed. If I telnet in and do a show route, they are all there. Am I not using the product correctly?