Network Security

Can anyone tell me what causes the errors and drops to increment on a show logging output? See below:Syslog logging: enabled Facility: 17 Timestamp logging: enabled Standby logging: enabled Deny Conn when Queue Full: disabled Console logging: disable...

I'm not after the command to do this.My question is, I would obviously NAT addresses going through the external interface. However, what are the reasons for/against NATing addresses between the DMZ and Internal network ?If you had :DMZ 192.168.1.0 / ...

I have an issue with ASA 5510 Firewall.I have three interfaces X,Y and Z, where X has a security level of 0, Y=0 and Z=10.I need to access hosts on Y from Z.As of now it works fine with NAT.All i want is to access hosts with no NATing.I have applied ...

Please suggest any free tool which can automatically analyse the logs from the firewall, collected in kiwi syslog server.reagrds, Naveen.

Hi,I have an issue were there is no phase 2 being negotiated for a specific subnet. I have checked that the policys match on the ipsec config which they do and timers etc. Everything looks ok but the router refuses to encrypt any traffic even though ...

I have 7.2 (2) on my ASA.. I want to get same sort of dashboard as it is there on ASDM Demo (6.0), like Top 10 Access Rules, Traffic overview, Top Usage Status, etc.. how can i get that in my real ASA?

This is what I currently have:access-list incoming permit tcp any host 2.3.245.131 eq wwwaccess-list incoming permit tcp any host 2.3.245.131 eq httpsip address outside 2.3.245.134 255.255.255.192static (inside,outside) 2.3.245.131 192.168.1.10 netma...

Hi all,I have got a problem as the below:I'm using In-band NAC, when client log in via Clean Access Agent, after that they click on log out but the message "failed to logout from the network" appears and they can't log out.Anyone has got the same pro...

We have an unusual case that we need to authenticate a machine in a dmz to an internal AD server. Has anybody done this and know how to do this? We think that when the machine does a lookup for the domain, the internal address is returned, not the tr...

I have a 6506 i need to upgrade to IOS and Layer 3it has (enable) sh modMod Slot Ports Module-Type Model Sub Status--- ---- ----- ------------------------- ------------------- --- --------1 1 2 1000BaseX Supervisor WS-X6K-SUP2-2GE yes ok2 2 16 1000Ba...

I got a customer who has a video client inside the network trying to access a GE DVR on internet. The client connects to port 1024 (Stream command listen server port) and then successfully connects to port 5858 (default video port). However, for some...