Network Security

I have a question that has been baffling me all afternoon.I have an ASA appliance which I have positioned to guard my Customers network from the Internet. On the other side of him is a Border Router which is a 3825 ISR.I have an ACL extended configur...

I have configured Site-Site VPN tunnel between 2 ASA 5505 firewalls (from corporate to branch office).I Can ping both networks. I Would like to route internet traffic through VPN from Branch office to Corporate and would like to pass the traffic thro...

Hello.I'm not very familiar with firewalls, but I've inherited a network with an active/standby 5540 configuration. It looks like the 0/3 interface on the standby firewall is bad, so I recently tried to move the subinterfaces on that interface to the...

hello,is there any way to send logs to a syslog server for only a specific access-list?thanks

hi every body!Let say we have an access switch sw1 which is connected to distribution switches sw2 and sw3 via port f0/2 and f0/3 respectively.swi port f0/2 is root port while f0/3 is blocked port. Sw1 is using uplink featuresw1 has following mac tab...

HiWith a Cisco ASA 5520 running ASA software version 7.2(4), SNMP interfacecounters for 802.1Q sub-interfaces appear to return the values for thephysical interface.Anyone know if this is a known bug/limitation/Alternatively, any workarounds?

Is it possible to delete all alerts (by selecting all) without having to ack. each and everyone manually. I was told by TAC when I had DFM 3.0 that it would be possible, but I still cannot do it.thks

hello,is it possible to just configure a dns server on asa and just use hostnames to the rest of the configuration?if yes, how? sorry i cant find any docs.

I've got a new 5505, and I've run through two wizards: one to start up, one to add client VPN. As a result, I can now connect from a client, the client gets the right info (ip adress, dns, gateway), but it cannot connect to any of the servers on the ...

I have IPS 4255, I have made a Service HTTP signature to block metacafe.I have configured the block device for PIX Firewall. Signature triggers when i open www.metacafe.com i can see the user IP in active blocking hosts and also in IP logging but sti...

Dear,During a cisco ASA 5510 cluster migration this weekend, we experienced 2 times this error on the moment of writing the configuration to the startup-config file of the Cisco ASA primary cluster node. After this error we noticed that the startup-c...

Hi All, Hitting my head against a wall with this any solution would be greatfully recieved.Basically I have a server on VLAN x connected to a 11500 CSS which is connected to the ASA on VLAN y. The CSS is creating a VIP on VLAN y for web traffic but n...

I have an IPS 4240 installed in between my customers Outside Firewall and his Internet Router.I have been receiving excessive Alarms from the IPS with respect to a match on signature ID:1300/0. This is allegedly a TCP Segment Overright. The addresses...

Hello, we recently bought a pair of ASA5520, we plan to replace our old Pix firewalls. ASA and multiple contexts are new to us. We've upgraded the firmware to the lastest ASA 8.04, ASDM 6.1(3). We've configured failovers, the firewall accesses are wo...

Hi,I have a Pix 515 and wondered what files I need to update it to the latest firmware, I think I need 2 files.Also I want to use the PDM or ASDM to manange it (along with the cli), would I still use the PDM or ADSM for later version of firmware?Than...