Network Security

Im having issues getting ezvpn to work with my asa 5520. I can get L2L ipsec connections working and my vpn clients work but when I try an ezvpn connection the tunnel will come up for a second and then will disconnect. I am using a 3g wic for my conn...

We have a partner company that we will be doing some network monitoring for. For connectivity, we have configured an L2L IPsec VPN between our ASA 5520 and their ASA 5510, which works fine. I want to restrict the tunnel such that only return traffic ...

Hi Sir,Below is output of "sh cpu usage context all" on a FWSM version 3.1(8):FWSM# sh cpu usage context all 5 sec 1 min 5 min Context Name 10.0% 9.0% 8.9% system 0.0% 0.0% 0.0% admin 47.5% 46.4% 45.8% fwsm-context1 0.0% 0.0% 0.0% fwsm-context2 0.1% ...

I have a ASA 5510 ver. 8.0(2) with 2 SSL Licence by default.Now, only one client can connect via SSL.When a second client wants to connect the ASA shows " No Licence avaiable". In "show vpn-sessiondb summary" i can see one active session but i can't ...

Hi, I want to know how to get a PAK number with a new ASA or IPS? also if I have an ASA, how can i get a PAK number for it? is it free or notwith regards

Hi,My outside network is: 10.x.y.0/24My inside network is: 192.168.a.0/24.The packet comes from: 172.30.b.192/29I need port forwarding or redirecting to my inside ssh machine and I don't like seeing host route to 172.30.b.ccc over inside if. of PIX.I...

What's the conf required on FWSM to disable VPN/IPSEC traffic inspection or to allow VPN traffic explicitly?

Ideally I would like to place an ASA 5510 in line between three devices on the same subnet and have the traffic between them inspected.For example the network 10.10.10.xEth0/0 would have input coming from 10.10.10.1Eth0/1 would have input coming from...

I need to get passive FTP to work through my 877 routers firewall.The only way I seem to have been able to do it so far is by allowing the 20 and 21 ports in which is fine but I also have to allow the range 1024-6000 to come back in otherwise the con...

HiI have a scenario where an IDSM with IPS 6 is triggering on traffic from a non-trunk interface but when the same traffic passes over another VLAN on a trunk.Monitor setup is like thismonitor session 10 source interface Gi1/2monitor session 10 sourc...

Is this the correct command to set the boot image?boot system disk0:/pix803.bin

Hi,is there anyway that we can enable this inspection in Firewall Service module? the escenario is we need to use an external company's VPN software inside our org and its not working. The traffic needs to cross FWSm to reach internet. so thought of ...

I replace a linux firewall with a ASA5505-sec-bin-k9. The customer have two remote sites conected in the following way: The carrier deliver a LAN connection, a 10/100 wire. But I know the provider has two routers, one goes to a the first remote site ...

Why don't signatures 1301 and 1304 produce alert even if "Produce Alert" event-action is specified for those signatures (promisc. mode)? Is it possible to send RST or shun a connection in promisc. mode when those signatures fire?