Network Security

I recently upgraded my PIX 535 to v7.2(4) and ASDM to v5.2(4)50 because of a reported vulnerability with the version I was running, well now when I view the real-time logging on the PIX I cannot use the Filtering option. Has anyone else run into this...

Hi, Im planning to delete the "downgrade.cfg and image.bin" in my router. Since in running out of flash mem so i can install asdm522 in my pix. Before deleting it, i just want to backup these files first. Im able to backup downgrade.cft but when im...

hi,how can you know the type of traffic flowing from the dmz zone for example to the inside zone ..., if there is suddenly for example 20 mb flowing from DMZ to inside , what command on the ASA can show me like the show ip cache flow on the router ?T...

I have to create a VPN tunnel between 851 router having dynamic public Ip and ASA5510 having static IP.I am currently using SDM and ASDM to configure the specified devices, it seems ike the router 851 supports peer with dynamic IP but not ASA. I just...

I have pix 515 E and i want to configure secondary ip address on inside interface of pix 515 E,is it possible to configure secondary ip address on inside interface of pix 515E?

Hi everyone!I have a PIX 525 that sometimes is not booting, it got locked in this part of the bootin process:CISCO SYSTEMS PIX FIREWALLEmbedded BIOS Version 4.3.207 01/02/02 16:12:22.73Compiled by morlee128 MB RAMPCI Device Table.Bus Dev Func VendID ...

I think I lost my mind over this. I have 2 ASA, one at a remote site- ASA5505 and one at our datacenter-ASA5520. The remote site has 2internet connections, primary is T1 and backup is DSL. All I want to do is this: when the the T1 failsthe VPN tunnel...

Hi all,I have got a problem as below:I have a NAC in-band model. It was working normally, but when I changed IP (CAS, CAM) to a new assignment, I got a problem: I couldn't use Cisco Clean Access Agent to log into my network, there was an error messag...

I have a new setup of 7.0(8) on a pix 515e and for some reason I can't seem to determine why I can get ftp, scp to work coming in from the outside. It works fine from the inside out. The access list rules look fine based on another firewall I have se...

I am running the NAC Appliance currently in virtual gateway mode for layer 2 inband and it works great. I wanted to add layer 3 virtual gateway inband to this same NAC server, but I can't seem to find enough documentation on this. I do have layer 3...

HelloDoes anybody can tell me how could I disable an inspection that is running by default in the global policy-map for particurar type of traffic on FWSM running in transparent mode ?If I create a new policy-map in the global service policy what is ...

Hi,I'm running a DHCP server in the inside interface. I configured the IP address of the interface inside as a DNS server (DHCP setup) but i can not resolve any domain. I tried to use the Internet with my ISP DNS and everything works well.The unit ac...

HelloIn my network we have upgraded the FWSM software from 2.3 to 3.2. After the upgrade we have encountered the following problem. We have an application that is using SQL-net protocol and is passing our FWSM in transparent mode. The problem is that...