Network Security

Hi, I have a question on VPN map access list and routing in ASA. I am considering a scenario of an ASA firewall with VPN tunnel configured for outside interface and has static or dynamic routing running. An access list defines match for incoming traf...

We just replaced our obsolete 515 with an ASA5510 and find that one of the sites that was available before is no longer available, switching them back brings the site access back.So, our new configuration is not allowing one particular site and I'm t...

HiI'm looking for a tool which will help me do the following on our Firewall1. Monitor the VPN tunnels and dial ups.2. Able to tell me who's logged on.3. Able to tell me what type of configuration has been done and by whom and when.4. Bandwidth usage...

Hi all,I have ASA 5520 with CSC-SSM modul. And, i am intrested in, What IP address and Gateway have i to assign to SSM module. I know, IP which will be assign SSM module have to reach internet for Trend Micro for updates. I just need to assign inside...

We are in the process of upgrading our IOS on the ASA to version 8 of code but when we upgrade and migrate over our current running config all traffic is able to go out but not come in. We havent opened a ticket with Cisco yet but I would like to hea...

Is it possible using a ASA5505 to sort of...augment the DNS resolution?We are using DHCP to configure inside hosts and they are being given the ISP's DNS server info but we have one internal server we would like them to be able to resolve as well.So ...

Hi,I enable the fw and it can block all IM (yahoo and MSN). However, I would like to enable some customers (192.168.25.12 and 192.168.25.13) can use MSN and yahoo IM. How do I config the csico 1811?### config::appfw policy-name test application im ao...

my client had a ips with 6.0x image, they having license upto DEC-2009, 2 days back IPS crashed, so loaded new image which is 6.1x after that i updated license information through cisco.com then it came only upto May-17-2009 it should be upto DEC-200...

Hi,I am trying to configure Active/Standby LAN-based stateful failover on two ASA 5510 running OS version 7.2(3)and having Security Plus license.I assigned IP addresses to the interfaces as shown in the attachement and I could ping all interfaces. Th...

I need to audit inbound connections to our ASA. It seems the only way is to set the Syslog settings on the ASA to informational, is this okfor the ASA? or very resourceful?Worst thing is we only need to be notified when a server webserver gets access...

Is anyone familiar with the differences between the Cisco router IOS WebVPN capabilities vs. the WebVPN available on the ASA? Are they essentially the same?

Hi,I am setting a Site-to-Site tunnel between my router and VPN3K concentrator. I have configured both the router and the VPN3K to get certificates from a local MS CA. When I run the interesting traffic between the 2 boxes, I am getting error below: ...

Hi, is there a way to recover a message that has been previously detected as SPAM by the CSC-SSM Module, sometimes we get legimit email targeted as SPAM, I want to know if there's a way the CSC-SSM to save the email to get it back or recover it in ca...

Hi,Has anybody tried this? I understand that in mars, only mcafee epo v3.5 is supported. We're evaluating both products. During testing, we seem to be doing the correct configurations but we can't make it work. I'm just wondering if anybody was able ...

I have Mars v4.2.6 and I wish to add checkpoint. I've gone through all the instruction as per the user guide and yet I still can't get this to work. When I click discover (under MARS) I get the following message: "CPMISessionNew failed messg: NO Erro...