Network Security

HI ,I want to allow iax traffic through the ASA 7.2.2.Is there a inspect available for that .We do have sip inspect also I want to know the adv of passing iax traffic rather than sip traffic through the ASA Raj

Does anyone know what happens to the traffic once the user license limit has been exhausted?Does it pass through or does it get dropped?

Hi, I can reach my FTP server system from my IDSM. but unable to upgrade..When ever i m trying to upgrade i am getting timed out..Kindly help me out in this..

I have ASA 5520 with 3 interfaces: inside, outside and dmz. I have a router on the outside with lo 0 192.168.252.6, which I cannot ping from the dmz. I do have a static translation dmz, outside. The route is also there in the ASA to reach the lo 0. I...

Recently I experienced an issue with an ACL where the ASA denied traffic where there was an explicit allow statement properly placed in the list.This happened after some changes to the list were made. A few entries were marked inactive and a few were...

Not sure what is needed to fix this but i have an ASA 5520 with 2 interfaces. 1 dmz and 1 outside.I'm using the ASA for both firewall and VPN but the problem occurs when people internally try to test the VPN portion and it directs them to the public...

Hi folks.I'm tinkering around with threat-detection and in the docs (http://www.cisco.com/en/US/docs/security/asa/asa80/configuration/guide/protect.html)it states:To view the top 10 ACEs that match packets, including both permit and deny ACEs., use t...

Hi,The tunnel connects and I am able to grab an IP address from the correct range. However, I am not able to pass traffic between the tunnel (192.168.5.0) and the DMZ interface/network (192.168.4.0).What piece or pieces am I missing from my configur...

Hi, I was wondering if the PIX 525 and the ASA5520 are configured using IOS? Just curious if it is GUI based or CLI based basically. Thanks for your help.

I'm switching my remote PIX 501's from dhcpd to dhcprelay so I can hand out IPs from my central W2K3 DHCP server. The 1st and 3rd conversions have worked well, but my 2nd doesn't work for some reason (I've duplicated the configs as much as possible)...

Hello, I was wondering, is it possible to explicitly set the IKE SA policy through the tunnel group settings? My understanding is the first isakmp policy that matches on both ends is the selected one. I want to make sure the SA settings I gave to the...

Hi,I was able to setup our ASA5505. Internet modem connected to firewall (outside) and used one port for the modem and another port (outside) for the web server LAN card. The internet is passing ok from internet to our web server (second NIC of serve...

Hi Guys,This is a little bit of an odd request however I need to allow a sync routing due to some legacy routing to pass through my ASA.I have allowed IP any any between the particular hosts involved to allow for high ports etc.. However the ASA is t...

We recently converted our LAN-to-LAN VPN's from Cisco 3005 VPN concentrators to ASA 5510's. Everything is working correctly, except for one thing.On the remote end of the tunnel, we have a Xyplex Terminal Server. When the tunnels were on the 3005's...