Network Security

I have problem with the ASA firewalls failover, when the ether channel between the layer 2 switches are pulled out, this triggers failover on the ASA, the ASA are Active/Standby. Please see the attached file for the real architecture this is in visio...

Dear all, I found out that my port 443 is open even I didn't configured it. It is comming from implict policy. How can I close this port on external interface?

Hi all,I got a problem with a Lan-2-Lan connection from my Active/standby 5510's with Sec Plus Licensethe config on the firewall is thiscrypto ipsec transform-set ESP-AES-128-SHA esp-aes esp-sha-hmaccrypto ipsec transform-set ESP-AES-256-MD5 esp-aes-...

I have a 5505 with the base license. I have a dmz and an internal network. I chose to have the internal network to be blocked from initiating connections to the dmz. I only need dmz machines to initiate connections to the internal network. I can ssh ...

HiI need configure a vpn site to site betweentwo cisco 800 series.I configure it, but the tunnel is down :(I need a manual to configure paramethres:-vpn components: crypto map,ike,etc..Thanks

First time am here so plz forgive me if there is any mistakes from my side.I want to implement Itrusion Prevention and Anti X features in a network, i prefer ASA and SSM modules, how can i install it successfully, is it possible in single ASA device ...

I work for a company in the US with a parent company in Japan. I'm trying to replace the Netscreen firewall at this end with a new ASA 5510 and have it l2l with the Netscreen that is likely at the other end. Anyone have any ideas?

Hi,I have configured SSL VPN Client(SVC) & Thin-client SSL on ASA Ver 7.x as per docs. Now when a user connects to the outside interface it prompts to download the clientless software even though this particular user is configured in the Thin Client)...

Hi guys ! Would appreciate if any of you guys know the procedure on how to transfer the contexts (20) from the faulty to the replacement fwsm.

Hi, I am confused about active/standby hardware failover cables. we put two cables, one is the serial cable and other is the state cable. what is the rule of these cables, and which one is responsible for exchange information about the other peer.reg...

Can someone tell me what best practice is for the management interface on the asa platform? I had to disable the interface as it was attempting to route traffic during normal operation. I thought that management-only meant that only specific traffic ...

We have a VPN 3000 concentrator and our vpn clients are version 4.0.4 (B). On the concentrator we have the ability to set up users and groups, but on the client we only have the option to sign in using group authentication. How do we go about enabl...

I have a Pix 515 at one site that I need to set up with P2P VPN access to another site. My problem is that the outside interface of the Pix is not an external IP address. The border router that I have at the location has two separate internet T1s com...

I work with the ASA's quite often but not the 3000 concentrators. We're going to migrate a customers security pretty soon and about 75 remote access VPNs.My question is, can the users / passwords / group passwords be exported from the 3000 or possibl...