Network Security

Folks,One of our cisco asa 5510 box shows high cpu utilisation. the output of the command is shown belowsh cpuCPU utilization for 5 seconds = 86%; 1 minute: 86%; 5 minutes: 86%Please let me know to investigate further and to make it normal.Many thank...

Hi,I have a question about cisco asa upgrade.I try to upgrade version 8.0.2 to 8.0.3 via rommon. The upgrade have success. When i reload the cisco asa i see the version 8.0.3 but into the flash i don't see the file. Could you help me?

Is it normal for the OOB Online users report to contain the Authentication VLAN IP address? This is what is happening in my environment, OOB Real IP GW with user role VLAN's assigned by AD SSO. It would be nice if this displayed the IP address of t...

Hi,I'm getting following error message while trying to ping from management workstation to one of my CISCO PIX interface. But in between 2 devices, I have got CISCO ASA which is dropping traffic and I can see following error message in syslog.I am pi...

Hi,We have a NAC OOB, Real-Ip Layer2 setup and the new option "Logoff Clean Access Agent users from network on their machine logoff or shutdown" does not apply when using OOB mode (which is annoying). Anybody found a way to make sure that when a use...

Can anyone elaborate on why NetFlow is a better solution for intrusion detection than IDS systems? My thoughts are that IDS systems are like packet capture devices, which see a very granular view of flows and can't produce the big picture that corre...

I have just a general question about the routing on firewall interfaces.If I have a firewall inside interface 10.1.1.1And my DMZ is 192.168.1.1Say I have a host in the DMZ 192.168.1.100.My workstation is 10.1.1.100 and I am using the firewall inside ...

Looking to upgrade my pix version from 6.3.3 to 6.3.5 anyone know where the download file is and how i can apply it?

New install of 3140. I already have CAM setup and now setting up CAS in OOB VG. Just want to make sure as cco doc statest E0 is trusted and E1 is non-trusted. However, 3140 has physical E1 and E2 interface. 1. Can I assume that physical E1 is actuall...

From behind an ASA 5510 with 8.0.3 running, I can't establish and FTP connection to any server, either active or passive. It seems to die at getting the directory list. It can connect and verify username and password, then just sits for a minute then...

Hello,I use 5505 as PPPoE client in small office and everything works fine during weekdays,people browsing and accessing remote VPN from outside.Some time at mid-weekend ASA becomes not accessible for VPN/ping/ASDM,I assume that PPPoE session expires...