Network Security

Hi, I am wondering if anyone out there has a failover active/standby or active/active PIX (or ASA) pair which is also using 2 ISP connections with the route tracking option on.Any comments on if it is a successful config would be appreciated.Kelvin

Does anyone know how to setup the asa's to not respond with icmp timeouts when a windows machine runs tracerts through them? The hops through the asa always respond with timeouts (hop 2 and 3 in this case).Example:C:\>tracert -d 209.167.231.15Tracing...

I have two firewall pix's model PIX-515E with software version 6.3.(4) in production.They are configured as failover active/standby and connected to Internet. Normally if I turn off the pix that is working as active the other pix go to be the active ...

Guys,If you si any problems with the ACL, I ask that you please let me know at once.My users are reporting latency with the web server after I implemented this rule. Please advise. Thanks.access-list 109 extended permit tcp host 172.16.8.22 host 192....

Hello, can someone help with this ASa certificate stuff, as its driving me nuts!I've generated a key pair, (using the defaults)Added a trustpoint using 'MANUAL' with the 'enroll terminal' command, as there is no path to a 3rd Party CAConfigured my tr...

ASA5510 8.0.3 rebooted itself yesterday. What could be the cause and how can I troubleshoot it?

Hello,Does Cisco ASA have a capability to check packets and drop some packets with say Skype or MSN or ICQ content?Another question: if we use WebVPN client to connect to our network through ASA, can we use some certificates for that in addition to l...

I upgraded two PIX 525's from 7.2(1) to 8.0(3) and I can no longer manage them across the VPN tunnels. What changed concerning management between 7.2 and 8.0? I can manage them fine as long as I'm on a machine that is behind the inside interface. All...

I have a DNS on the inside of my PIX, with IP 10.1.1.3, trnaslated at PIX as 10.1.2.3.Now an application like Active Directory client accessing from Less Security interface access the DNS as 10.1.2.3 but as on the local DNS there is no Host name agai...

Dear friends,A general question on Event Action filters. There is a signature with sig ID 6257. The following is the event action filter configuration: service event-action-rules rules0filters edit DHCP signature-id-range 6257subsignature-id-range 0a...

We have FWSMs (version 3.2(2) ) in active-active (2 chassis). The customer has a switch, which has separate connections to both firewalls.When one link fails, the FWSM switches over, just as aspected.However, what happens if the customer switch goes ...

Hello,Next Saturday it is planned that I upgrade our active/passive multiple context FWSM Modules from 3.1.1 to 3.2.5.I would really appreciate if I could get as much information from people who have already done this and what their experiences were....