Network Security

What is the procedure to upgrade an ASA appliance when its in L2 transparent mode? Only way we could find was by putting the unit into ROMMON, is there another way? Cisco documentation describes the method for a L3 ASA, but no mention of L2 mode.The ...

Hi alli hope you can help as this is driving me crazy. I need to configure a firewall solution that will connect to 1 ADSL and 1 SDSL link. they require ios firewall with vpn (about 30 dialup vpn users).I have been trying to use the cisco configurat...

The pix 515e unrestricted software include the 3des-aes or i'll have to buy it

Do I have to open port on firewall in order to use vpn client3.x or 4.x to connect to outside network. How do I configure my ASA to allow port TCP 10000 or udp 500 opened. Clarification: my user inside network unable to connect to outside network ...

Hi,I am going to implement the SSL VPN appliance in the DMZ of PIX515E (6.3 Ver)I have to give access to SSL VPN from outside users and as well as from inside inside users.Please help me.My understanding is SSL VPN has to be NATTED for outside and al...

We have a number of PIX that seem to have this problem of refusing managment connections from time to time via SSH. The PIX are still responsive to Console access and still function properly as far as passing/blocking regular traffic. I've tried con...

After installing a CSC SSM for our ASA 5510 I noticed in the SMTP configuration screen that I could not not accept smtp messages over 50 mb. Am I correct on this? We regularly get valid smtp messages over 50 mb. If that is the case then the smtp part...

Does any one know how to remove multiple context mode from a 5510?

I have a brand new ASA right out of the box it boots up all the way up however after configuring the interface and default route to upgrade from 7.0 to 8.0 it locks up. Can not ping have to reboot box this is constant what can I do suspect bad box.

I have a pix 501 with pix version 6.3(4)I currently have static nat. I want to leave the static nat and add a dynamic nat for a block of say 30 addresses. I need the address to release if there is no activity for say an hour. Would appreciate any hel...

During an initial configuration of my new Pix 501, I entered and confirmed a password when given the opportunity. However subsequent logins have failed. I was not given an opportunity to establish a new user name so I thought leaving the user name bl...

Hello,It's posible create a icmp service with type and code?. I search but i find that only is posible especify the type, if this is true the asa think that all unreachable are the same????Regards.