Network Security

Hey guys,Just checking my PIX logs and I keep getting this alert "Aug 21 2008 09:37:15: %PIX-2-106016: Deny IP spoof from (127.0.0.??) to 108.122.0.0 on interface dmz"The last octet of the 127 address changes and it's to the same destination. Just wo...

I'm using IP SLA Monitor with a default ICMP Jitter operation to an ASA interface, but the firewall does not respond.How can I enable a reply to a timestamp request message?Thanks.

Say I have a network object group object in my firewall, and I wish to add in not just an IP but a range of IP's. 12.12.12.1 to like 12.12.12.10? I hope I am doing this wrong by entering in 10 ips vs just a range of some sort. Chuck

I have two new ASA 5510s, with 7.2(2)10 configured for active/standby failover.due to ASA interface limitation/availability, I am using only one interface for both LAN-base and stateful failover:interface Ethernet0/3speed 100 duplex full!interface Et...

Hi,I am trying to set up IP SLA configuration tool between 2 sets of Cisco Routers. Set 1 is from Dublin to Cork (Dublin IOS c7300-a3jk91s-mz.122-31.SB3.bin to Cork Cisco c2800nm-entservicesk9-mz.124-7a.bin with ip sla monitor responder enableD). Thi...

We originally posted files (Antivirus, Patches, SPs) in the requirements section but when files got too big it was not feasible.So we developed a web server solely to serve the certification zip files for students to meet the requirements.After they ...

Hello TogetherWe run a proxy server in the DMZ of our ASA 5505. The ASA is connected to a cable modem. If we download something (microsoft downloads, etc.) the starts accurate with about 1,5 - 2,4 MB/sec then drops down to 300-400KB/sec. The same thi...

Hi ThereI have a Cisco ASA 5510 with two WAN connections. WAN Interface #1 is configured statically with a static route, and this interface also handles all inbound traffic. WAN Interface #2 is a Cable Internet service, which I want to route all Outb...

Hi,i encountered a problem concerning our FWSM. It's configured as a multiple context routed Firewall. There is a context A inside (security level 95), a context B inside (not yet configured) and an admin context. The next hop outside is our 6500 and...

I bought a new ASA5510, as I worked with a pix years ago I tried to configure the ASA myself, as a didn't have luck, asked for help from a certified Cisco consultant, and he didn't had luck either, so I'm asking here, i was using adsm to configure th...

the default idle time for a connection on a Cisco ASA is 1 hour, as denoted by the timeout conn command. The ASA then closes the connection.What i wish to know is how does the ASA close the idle connection? does it send a Reset to each end of the con...

I have a very strange problem - I am running PIX 525 with ver 7.2 software. I am receiving email from my customer OK. But i have only one customer who is unable to send me emails with attachments, but can send me plain text.Below is the error message...

hi, can i block the traffic between the same ports of the asa? for example, the asa 5505 has 8 ports, the ethernet port from 1 to 7, are for the inside vlan, and i want to know if i can filter traffic using an ACL between the ethernet port 1 and 2 fo...

On a PIX-515 running 6(3)4 code, is there a way to prevent proxy arp responses for hosts on the same subnet? For example, one host wants to get to a website on another host on the same subnet. The first host sends a "who has" request and should get a...