Network Security

I have a MSFC -> FWSM(A/S FO) -> ACE(FO) design using 2 security contexts, with the ACE modules in bridged mode. I notice the servers on the server side VLAN(501) on the ACE module sometimes show up on the client side VLAN(500), when I do a show arp ...

I want to exclude some of my network's internal IP addresses as sources. This is a recommended action for some signatures fired on the AIP-SSM of my ASA.Pls, how and from which of the devices do I exclude the IP addresses.

I'm sure there is something easy I'm missing, but I'm missing it. I have a lan-to-lan VPN established between a VPN Concentrator 3030 and an ASA something or other on the other side. I don't own the device on the other side. Because of an IP confl...

Hello all,I am hoping this is an easy one.I know that I can port forward one at a time to an internal IP, but what I am wanting to do is forward ports 10000 through 20000 to an internal IP. Call me crazy but it will get really boring/confusing/tiring...

Hi, there:Is there a way to let us monitor FWSM 2.3(3) throughput,like data rate per second based on a interface ? you know, show interface on FWSM just give us very limited information.I know show traffic on ASA platform can give us those great info...

What issues arise if I have a router which plugs in to a switch (2950) and I have two separate PIXs attached to the same switch? I have a block of Public IP's (6 usable), 5 would go to PIX1 and 1 will go to PIX2. Am I looking at a routing nightmare...

Hello,one silly question - is it possible to specify DNS name in ACL on ASA? e.g. access-list ACL-TEST extended permit tcp any host www.example.com eq sshIf it is not possible - any plans to add that feature? Can be really useful for outbound restric...

This morning I had a ASA5540 crash - it suddenly froze, I lost contact, and then it rebooted itself. It lost contact with its mate and consequently the secondary failed over and is now active. Now it's back up put when ping to the inside interface (o...

Does nac appliance uses a systeme of self protection?

hi,if i have a Pix in center of two 2950 and i have to make a trunk between my two 2950.Whether PIx will pass VTp information.

I have a VLAN configured and trying to connect my other 2 locations that are using a VPN. This is what I'm thinking I need to do.Ex:HQ VLANs{PIX}route in 0 0 [Public]route in 192.168.1.0 255.255.255.0 192.168.5.23550 fa0/1 - 192.168.5.1/30 -> 192.168...

Hi allI want to know if it's possible (see attachment for detail) to manage multiple subnet within a Layer 3 switch (3750) through a ASA5520 with 802.1Q tagging.Refering to jpg file; the SQL and ACS subnet are only define in the layer 3 switch The D...