Network Security

hi, I have a customer who has upgraded from pix520 to asa 5520 with csc modul in march 2007. now the customer has a second asa 5520 with csc modul. today we are going on with the failover configuration and now we have a big problem... I tested the hi...

We have 2 sites seperated by an ASA 5520. There are some servers on one side of the ASA which are hosting IRC (Internet relay chat) and SSH service. The clients for both services are on the other side of the firewall.We are often seeing two issues:(A...

So I was trying to configure an ASA 5505 with both dynamic NAT for PC users to reach the internet and static NAT to reach servers behind the ASA. PC users work ok although they could not ping out which is odd.But the real problem is that I set up som...

Hi,I have add the "ip verify reverse-path interface <interface name>" to all my interfaces on my ASA, the syslog alerts I'm getting now are:Deny UDP reverse path check from 192.168.1.1 to 192.168.2.2 on interface DMZ2Deny ICMP reverse path check from...

I'm getting ready to move our VPN connections from the VPN Concentrator to our ASA which is also our internet firewall. My question is, does it make sense to connect one of the ASA's unused ports to the DMZ and use that as the VPN port or just config...

Hello All,I was wondering if anyone has made practical uses of the ASA's Modular Framework Policy, especially in creating customized inspection engines via creating inspection-policy maps and matching regex expressions in the inspection-policy. How d...

Hi Can I install CSA MC and LMS Applications on the same hardware server. Regards/Asfar

Hi,The following logs I am getting in my ASA.x.x.x.x L2L VPN peer IP (remote end)We are getting this log whenever tried to call remote end (IP Telephony). We can able to hear our voice but they can't.3|Sep 16 2008|13:33:18|713902|||Group = x.x.x.x, I...

When using the ASDM I go to monitoring > routing > routes but there are no routes listed. If I telnet in and do a show route, they are all there. Am I not using the product correctly?

lms 3.0.1 on solaris 10today I want to change the discovery settings but there are no definitions!the last time (friday) there were all definitions ok (seed device, snmp, filter and so on) - now there are no settings! where are the settings - can I r...

I have PIX 515E. configure two context. But i can't configure isakmp. I can't understand. When i configure on command mode " isakmp enable vpninside" show invalid input. Pls any one help or suggest me what i do.

Hi,The CPU on my ASA is higher than normal. Usually it's around 10-15% but now it's around 40% since a couple of days ago.No nothing has been added to the ASA's config, plus the bandwidth through the switch hasn't changed either, how can I debug?Than...

Failed to locate egress interface for UDP from inside:172.16.1.4/53104 to X.X.X.X /53 was a syslog message in ASA Software Version 8.0(3),all the access-list and Natting are fine and even found the traffic is passing other time.what could be the poss...

i have ASA5520.its new installation.plz suggests.my network have a two Mail Servers and one ISA Server.i have planned put my mail server to DMZ network and ISA server into my inside network.inside users connect internet via my ISA Server.the above pl...