Network Security

Hello,I have 2 ASA 5510 SEC-BUNI want to enable failover.I have this configuration : Ethernet 0/0 : OutsideEthernet 0/1 : InsideEthernet 0/2 : DMZI follow the example : How to configure Failover on ASA, and i can read that i need two interface :One f...

Hi,I try to give an access to an intranet app through VPN SSL portal. I get an error when clicking on a menu which use a text based parameter. The box seems to add a quote which disturb the app.Anyone can help me ?

we currently have several offices internationally. Each Office is considered an untrusted site, so we have firewalls between offices. Most of these firewalls started with Pix 6.3 but have been upgraded to 7.2. Many of the rules have been put in place...

Below is the description for the message ID 106100,"If you configured the log option for the access-list command, the packets matched an ACL statement. The message level depends on the level set in the access-list command (by default, the level is 6)...

I have a MSFC -> FWSM(A/S FO) -> ACE(FO) design using 2 security contexts, with the ACE modules in bridged mode. I notice the servers on the server side VLAN(501) on the ACE module sometimes show up on the client side VLAN(500), when I do a show arp ...

I want to exclude some of my network's internal IP addresses as sources. This is a recommended action for some signatures fired on the AIP-SSM of my ASA.Pls, how and from which of the devices do I exclude the IP addresses.

I'm sure there is something easy I'm missing, but I'm missing it. I have a lan-to-lan VPN established between a VPN Concentrator 3030 and an ASA something or other on the other side. I don't own the device on the other side. Because of an IP conflict...

Hello all,I am hoping this is an easy one.I know that I can port forward one at a time to an internal IP, but what I am wanting to do is forward ports 10000 through 20000 to an internal IP. Call me crazy but it will get really boring/confusing/tiring...

Hi, there:Is there a way to let us monitor FWSM 2.3(3) throughput,like data rate per second based on a interface ? you know, show interface on FWSM just give us very limited information.I know show traffic on ASA platform can give us those great info...

What issues arise if I have a router which plugs in to a switch (2950) and I have two separate PIXs attached to the same switch? I have a block of Public IP's (6 usable), 5 would go to PIX1 and 1 will go to PIX2. Am I looking at a routing nightmare? ...

Hello,one silly question - is it possible to specify DNS name in ACL on ASA? e.g. access-list ACL-TEST extended permit tcp any host www.example.com eq sshIf it is not possible - any plans to add that feature? Can be really useful for outbound restric...

This morning I had a ASA5540 crash - it suddenly froze, I lost contact, and then it rebooted itself. It lost contact with its mate and consequently the secondary failed over and is now active. Now it's back up put when ping to the inside interface (o...