Network Security

what is the meaning of "Inbound TCP Inbound TCP connection denied from - to- flags SYN on interface Outside" and how to solve this.

Hello, I've got a 5540 that firewalls my production lan enviroment. I monitor the asa with asdm and i am constantly watching that the cpu usage is over 80% even though there are not a lot of active vpn's. Does anyone have some tips on how to make wor...

when configuring a crypto ipsec transform-set command, how many unique transforms can a single transform-set contain

I currently using an IPS ASA 5500 AIP . Because i am new to this product so does anyone have any baseline for configuring of this IPS. Can share the knowledge. Thanks

We are building a new setup, this new setup entails bundling two new firewall service modules to produce 10 Gbps.Currently, we have two distribution switches ds03 and ds04, in each of those distribution switches , we have two FWSM and one ACE module ...

Hi AllWe have a site to site tunnel running between two sites SiteA and SiteB from both the sites we are able to ping devices internally in the network but not to the inside interface of the ASA.I have enabled the management interface as the inside i...

Hi Techies,I have been assigned project for setting up the security contexts on PIX firewall.Please see the below tech details:I have created two contexts i.e. Admin & CustA. I have decided to share the Outside interface between two contexts. I have ...

I'm interested in trying out version 8 on an ASA - does anyone have any comments on how much risk there would be in upgrading a remote ASA to ver 8 from 7.24? I have three standard site to site VPN's; two to PIX's running 6.35 and one to a router run...

Hi. I want to create a ipsec vpn between 2611 and pix ( pix is not on my side ). I have this configuration on 2611.crypto isakmp policy 10 encr aes 256 authentication pre-share group 2crypto isakmp key xxxxxxxxxx address y.y.y.y!!crypto ipsec transfo...

Hi, I am trying to understand how ASA treats GRE traffic. I have a application that needs to set a GRE tunnel between two (internal) WAN acceleration devices across Internet via IPsec VPN, and polycom video traffic is carried by this GRE tunnel for W...

We have two core 6509 switchs running HSRP.We have two firewalls in active/standby roles and want to implement a high availablility structure with the core switches, firewalls and edge router.In order to do this, I believe the inside interface of eac...

I am configuring an ASA, but I have no respond when I try to ping to any outside IP address. I have already checked the commands related to ICMP and I have already set those commands.Is something left still ??? this is the sh run file.....ciscoasa# ...