My customer recently tried to upgrade their ASA5520 to ASA 8.03(12). When they did that, all FTP through the firewall ceased to function.Is there a fix or a workaround for this?
I am having some trouble getting this tested in the lab. Essentially I have two PIX 506e setup, one pretending to be the hub, and the other a spoke (outside interfaces on the same network) with a working tunnel between them. I could ping across the...
I currently have a Cisco IPS 4240 employed inline in my Customers Network. It is inside of the border Router, and in front of the Outside Firewall which protects the DMZ.the IPS is already configured to block certain types of packets inline. I was ...
I am looking to do failover with two Pix 515E devices and looking at the advantages and disadvantages for Active Active and Active Standby. I see Active Active lists as not supporting VPN because of the multiple contexts. Is this just referring to ...
Hi,The IDS signature "SQL Query in HTTP Request" (5474:0) does not recognize all malicious SQL selects. Currently, the reg exp looks like [%]20|[=]|[+])[Ss][Ee][Ll][Ee][Cc][Tt]([%]20|[+])[^\r\n\x00-\x19\x7F-\xFF]+([%]20|[+])[Ff][Rr][Oo][Mm]([%]20|[+]...
my main network is 10.9.2.XXX i have sub networks ie. 10.2.x.x, 10.3.x.x, 10.4.x.x, and so on! if i log into the 10.9.2.x network i can go into any sub network. but if i connect my laptop to ANY sub network of course my ip gets that sub networks ip. ...
I figured it out but if you have a better solution, by all mean please do.The ISP will be changed also so the DNS record will have to change. I will configure the DMZ with the new IP range from the new ISP. Change the server IP address and the DNS...
Hi Friends,I have installed cisco security manager 3.1.1 with SP3, RME 4.0.5, MCP 3.0, cisco common services 3.0.5 and AUS 3.1.1The existing PIX, ASA and ISR routers are added in RME and its working fine.The same devices are import from DCR and added...
I "denied" IDs 1109/0, 1109/1, 1109/2, 1109/3, all Cisco IOS Interface DOS. The above was configured in the IDM>Configuration>Policies>Signature Definitions>sig0)>Active Signatures. Denying the above denied all Internet activity. How do I know whi...
Hi, I configure RA VPN on asa now i want to access ASDM from vpn client but i could not able to connect ASDM after connecting VPN client. Please find my config & suggest me how i can..Thank in advance..
Hi,I have the following config.ISProuter---ASA---3750-------LAN usersALl LAN users use VLAN 10 (10.10.20.50) as their default gateway. Int g1/1 on the 3750 is in Layer 3 and has IP address 10.10.18.5. Its 0.0.0.0 route points to the ASA internal inte...
PIX-515E: Version 6.3(5)I'm trying to open a connection to a webserver on the dmz interface from a host on the inside interface and it fails. In this instance the webserver is listening on port 88. I think the problem it is something obvious that I...
I have two datacenters connected via EIGRP dynamic routing. Branch offices terminating at the datacenters via lease lines. I would like to backup the lease lines with ipsec vpn on either ASA's 5520 or higher or cisco 2800 routers. Using either EIGRP ...
515EI am in the process of setting up an in house mail server. In so I have setup smtp, pop3, and imap to pass to my mail server.for some reason when I do the telnet test for 25 from an outside location, the 515E returns the 220 and not my mail serve...
