Network Security

Hi, we are currently running pix 8.0(2) and ASDM 6.0(2) on some 535's.What is the best upgrade path. Is the 8.1 firmware available yet? Or should we just upgrade to 8.0(3) etc..Cheers

How H.323-aware feature inthe pix device disabled.I have done ststic natting for voip media gateway.Over the static nat its not working.I got to know that the pix device must be with H.323-aware feature disabled.Could you please let me know how to c...

Hi Folks, I have an ASA with several LAN to LAN IPSEC tunnels configured and having VPN drop outs if we leave our session idle for sometimes as little as 5 minutes.Can this be increased to something more realistic, say 60 minutes +?Thanks,Chandru

how to use manual key negotiation with pix 501 6.3 to solve VPN tunnel negotiation problem

Hi, how do I assign public ip address that is not assigned to firewall to an AIP SSM, what is best way of accessing AIP-SSM web interface over internet??I mean currently there is some 10.x.x.x ip address is assigned to AIP-SSM if and that ip address ...

I am having trouble with connectivity and the IPS Module. The IPS management interface is plugged into a dell powerconnect switch using a straight cable and it shows a link. However I cannot ping the ip address i have assigned the management interfac...

I would like to replace tftp with scp. Since you cannot do a "copy run scp" on the ASA, I'd like to scp the ASA's system:running-config to my server I store backups on. The ASA also does not recognize the (/) character so I cannot "scp user@asa:syste...

FWSM cpu high level (90%-100%) by periods..I think bug on 3.2(3) but not certainlyI found bug 1. tcp-normalizer 2. High CPU in http inspection add "show process" file (normal,problem)please help me..

Hello all.I'm mounting a lab scenario to a NAC solution based in Inband VG. I followed the scenario used by Prem Ananthakrishnan in the Chalktalks, the only difference is that instead of the 6500 I'm using a 3550 switch. My problem is that NAC is not...

Hello,We have recently migrated from an IPTABLES based (among other things) for NAT and firewalling to an ASA 5510.While the transition has been smooth there is an issue that has risen.Some of the network people had in the past through IPTABLES NAT a...

We have a PIX 515E Active/standby Failover configuration and the no matter which firewall is active or standby by Active lights remain on both PIX 515E. Any ideas on how to diagnose or resolve this issue.

We have websense and it seems like long urls on the handheld devices are timing out. There are few commnds that I have looked up. url-block url-size and url-block url-mempool fro the Pix firewall. I was just checking to see if someone has run into th...