Network Security

Hi,I have ASA box here running 7.2.3 code. Below is the goal.Simple configuration. Inside and outside. When inside subnets go on internet use the PAT(global and nat commands). However if the inside hosts go to a specific address(my 3rd party MSP), th...

We have 2 ASA firewalls in Routed mode and Active/Standby failover.If you do not configure Standby IP addresses for the interfaces is Normal (waiting) an expected behaviour?This host: Primary - ActiveInterface outside (217.112.81.130): Normal (Waitin...

CAN'T COMMUNICATION BETWEEN IPSEC VPN CLIENT AND SSL VPN CLIENT,ipsec and ssl user same ip pool，ipsec to ipsec is normal,ssl to ssl is normal.

Hi all,Friends, i tried to config a new ASA 5505, with my old startip-config... I transfer ,,startup-config'' from tstf server OK... but when i reloaded ASA FW the nothing changed...I think that something need with confreg... maybe its new one (ASA 5...

Hi,Wanna know that is it possible to configure the qos in the firewall pix 515e.The purpose for this is wanna do the qos for the voice traffic.Thank you-Gilbert

I have a security rule that prevents outbound SMTP connections from LAN IPs. This rule was inserted because it seems we have some infected PCs that are trying to send mail. Is there a way I can see what IPs are being denied the outbound SMTP so I c...

I updated our CSM installation from 3.1 version to the new 3.2.0. The installation finished without any problem, but now I'm not able to start the CSM Clients anymore. The new version just crashes with a java exception. I noticed in the help, that on...

Is there a way to export custom signatures from one IDS system to another. Either from the sensor, CDM or IDSM. Also is there a way to import Snort signatures and import them as Cisco sigsThis would be for IPS 4200 series devices

Apologies in advance if this comes off like a totally boneheaded question! :-)Our situation is that we currently have a PIX 501 firewall, and we're upgrading to an ASA 5505 because the PIX is getting a little long in the tooth and coming up on end-of...

Is there a way to configure the IPS 4240 to monitor traffic but not to block connections? We are currently evaluating the device but would prefer it to monitor rather than block any live traffic at this stage. We have configured an event action fil...

i have an ftp site setup that should be passing through my firewall but i am getting an error of no translation group. i do have Nat 0 allowing traffic between interface 1 and interface 2. I have attached a copy of my config

HelloWe have a FWSM in use with some 3.1.x software on it. The clients are authenticated via http AAA login box.We would love to switch to https instead of http.My tests have shown now that the https URL is always the one the client typed in into his...

I have to connect two offices using 1841 routers . I just have an issue both the sides are behind a single subnet and I have to do NATTING. The issue is how will be the router able to manage that which IP exist at which site. The same issue exist wit...