Network Security

Hi All,We just recently upgrading one ASA firewall to version 8, for evaluation purposes. Upgrade was straight forward with no errors. Most of the existing rules are working fine. We do noticed a problem with most of our L2L IPsecs. We cannot get the...

we have an WCCP ebable device located behanid the ASA , and we are not able to enable the WCCP to work , i think ASA is blocking the WCCP traffic , any idea of how to make it work

Hi,Is there a way to stop bittorrent. I have tried using match statements in class/policy-maps with no luck.I've moved on to using FPM but still no luck. I believe the newer torrent clients encrypted communications.Any Ideas?Regards,Steveclass-map ty...

How to enable inline mode in IPS Sensor & what are the step we have to follow ?

Hi,I can see in my logs many of the following enties: %ASA-6-201010: Embryonic connection limit exceeded -2/1024 (for various sources and destinations)I can't find out any information on the minus value (-2) can someone tell me how I can have a negat...

Hello,As I monitored the CS-MARS incidents, I noticed that the System Rule: Modify Network Config constantly firing but we haven't done any changes in the device. The reporting device is ASA firewall which sends syslog messages to CS-MARS. Below...

Hi,I am planning for deploying NAC appliance in OOBVG mode. For the access layer, L2 switches are selected (2960). If I change the L2 access switches with L3 (3560 or 3750) would this add more manageability to the access layer by NAC?Regards,Mladen

Hi,I have a need to schedule a reload of some ASA firewalls on a regular basis. What I would like to do is create a reccuring schedule on each ASA to say reload at 23:59 every Friday.I'm aware of the RELOAD command but this appears to be a 'one time ...

Hi,We are using CSA V5.1.0.69. And now we want to upgrade this to the latest (V5.2).Is there any option like auto upgrade from MC? or Do we need to upgrade this manually.

I'm trying to find out if it's possible to created an encrypted tunnel using two ASA's but using transparent mode, rather than routed mode. My understanding is that transparent mode works at layer 2, so IPSec might not be avaiable (since it's at lay...

Have dual identical 5520s to provide active/failover for lab environment. To secure environment behind firewalls, I've read that I will need to do L3 routing on ASA and remove L3 vlan routing from dual redundant C6509s.If i'm doing failover / redund...

Hi everyone;Some how I lost my rsa keys, not sure how but when I do a sh ca mypublic rsa nothing shows. Question is how do I regenerate the keys so that I can SSH into the router again? I thought I can do a ca generate rsa key but that doesn't work...

Dear sir, We have pix 506 e in that all users r able to browse but unable to connect ssh with name server with external dns. Regards srini

I recently upgraded a customer from a PIX 525 (running 7.0 code) to a pair of ASA 5550s in active/standby mode. The ASA runs 8.02. The customer uses a software identity service called Trusted Network Technologies 'Identity', which communicates with a...

running Pix OS 7.0x Guys what am I missing here? I have an permit ip any any from my inside to my outside interface. Yet rhapsody will not get past the DRM stage of install. I don't have any of the sites it wants to access blocked by domain or IP in ...