Network Security

HiWe are logging to a syslog server on level informational. I see a byte count logged with each connection and I'm trying to understand what it means. Is it the sum of in+out traffic for the connection? Or is it only one direction? Is there a way to ...

HiI would like to know how would I go about finding out whether the Cisco Firewall Services Module Version 3.1(6) for snmp/mib is either 32 or 64? is there a show command to view this?I have a problem pulling stats using my NMS and feel that the wrap...

Hi there, I have a pair of F5 Firepass SSL VPN devices. They are sitting behind a pair of ASA's. When the Firepass devices fail over they send a gratuitous ARP informing of the MAC change but the ASA ignores this. The only way I can resolve it is to ...

HI ,I want to allow iax traffic through the ASA 7.2.2.Is there a inspect available for that .We do have sip inspect also I want to know the adv of passing iax traffic rather than sip traffic through the ASA Raj

Does anyone know what happens to the traffic once the user license limit has been exhausted?Does it pass through or does it get dropped?

Hi, I can reach my FTP server system from my IDSM. but unable to upgrade..When ever i m trying to upgrade i am getting timed out..Kindly help me out in this..

I have ASA 5520 with 3 interfaces: inside, outside and dmz. I have a router on the outside with lo 0 192.168.252.6, which I cannot ping from the dmz. I do have a static translation dmz, outside. The route is also there in the ASA to reach the lo 0. I...

Recently I experienced an issue with an ACL where the ASA denied traffic where there was an explicit allow statement properly placed in the list.This happened after some changes to the list were made. A few entries were marked inactive and a few were...

Not sure what is needed to fix this but i have an ASA 5520 with 2 interfaces. 1 dmz and 1 outside.I'm using the ASA for both firewall and VPN but the problem occurs when people internally try to test the VPN portion and it directs them to the public ...

Hi folks.I'm tinkering around with threat-detection and in the docs (http://www.cisco.com/en/US/docs/security/asa/asa80/configuration/guide/protect.html)it states:To view the top 10 ACEs that match packets, including both permit and deny ACEs., use t...

Hi,The tunnel connects and I am able to grab an IP address from the correct range. However, I am not able to pass traffic between the tunnel (192.168.5.0) and the DMZ interface/network (192.168.4.0).What piece or pieces am I missing from my configura...

Hi, I was wondering if the PIX 525 and the ASA5520 are configured using IOS? Just curious if it is GUI based or CLI based basically. Thanks for your help.

I'm switching my remote PIX 501's from dhcpd to dhcprelay so I can hand out IPs from my central W2K3 DHCP server. The 1st and 3rd conversions have worked well, but my 2nd doesn't work for some reason (I've duplicated the configs as much as possible)....

Hello, I was wondering, is it possible to explicitly set the IKE SA policy through the tunnel group settings? My understanding is the first isakmp policy that matches on both ends is the selected one. I want to make sure the SA settings I gave to the...