Network Security

Hello,The default policy on an ASA firewall is to drop DNS UDP datagrams larger than 512 bytes. Have you modified this policy? We had quite some DNS root-servers sending UDP packets of 541 bytes. Is there som general recommendation?Best regards,Rutge...

Hi allI am having a problem with my PIX 501.I want to enter the privileged mode but as soon as it completes uploading in user mode it stops therePIX >I try to type "en" and I can't type or do anything.Any idea?Thanks

Hi guys,one of our sensors is currently having problems not wanting to scan any traffic. when we reload the sensor we get the follow error"errorMessage: SignatureDB: TcpRootNode non-zero refcount (1st pass) - exit destructor name=errUnclassified" a...

Hello All,I am attempting to allow remote vpn users access to a "shared drive" but I am running into problems. I have established the following:1) A successfull VPN connection2) VPN users get IP addresses in the following range: 192.168.1.0/24When I ...

I understand Netflow is not possible on PIX. Has this altered in the ASA series?Thanks

We are running 2 x prodction failover Pixes (UR licence) on 6.3. What advantages exist in going to version 7. We do not deploy VPN, IPSec, IP6 or anything other fancy stuff. Just a simple (though extrememly important) rulebase. We do not use PDM just...

Hello,We use ASA 5540 as vpn concentrator and firewalling. I was wondering if there is and utility similiar to Get Pass that checks the encrypted password for the ASA's.Thanks.

I know this isn't supported as the release notes for PIX 7.x & 8.x state that they require a minimum of 16MB Flash & 64MB DRAM. However the 7.0.x releases and the initial 8.x release are less than 8MB so would in theory fit in the 8MB flash. I know...

Every thing is working well in my firewall, I have the DMZ working ok, I can access the net, I can create a VPN into my network.The only problem is that I can access most os the sites in the web, but there are some that do not work like http://www.mi...

Hello,over the weekend, I again tried to upgrade our 535 firewall's dmz interface from Ethernet to Gigabit Ethernet, however, for as long as i have 4 Gigabit Ethernet cards inserted I cannot establish connectivity with the rest of my network.In order...

Not sure if this is the right forumn for this, but has anyone encountered Ultrasurf and if you have, have you created a sig for it or blocked it at the firewall? It is an extremely powerful and tricky proxy avoidance tool that runs in memory. It do...

Hello, my asa 5510 does not boot, it has the status led in solid amber color ("The power-up diagnostics have failed" in teh manual), and I can not connect to any console.What can I do? thanks

I have a question for pix Firewall gurus in this forum. I do not have a pair of UR Pix firewall to test thisso I have to ask.Scenario:inside network: 192.168.1.0/24outside network 129.174.1.0/24default gateway for inside network: 192.168.1.1default...

Hi, I have just upgraded from a PIX to 2xASA 5520 in active/stanby mode. When I go into the IPS via the ASDM it only shows me a URL which doesn't work and mentions that I have version 1.5 and 1.6 would be integrated into the ASDM. How can I do this...