Network Security

Hi there,I have got an ASA 5510 with IOS 7.0.7.The ASA has two external connections: - External VLAN 5- External VLAN 225 (default route points to the next router)Now i try to connect with a SSL-VPN to the IP, bound on VLAN 5.This does not work. If I...

We have Pix 525 (in a test lab non prod). I am trying to tftp a new OS image (6.3.5). It is currently running 6.3.3. to do this I am in monitor mode on the Pix (You have to be in monitor mode to do this). I can ping my laptop FROM the firewall (whic...

Hi, I used to access ASDM with a username and password but i screwed up something and i think i erased it.Could anyone tell me how to add a new one?Here is my config file.

Dear Forum, I am trying to activate an old PIX-515E (Restricted Software) which has been idle for more than 2 years. The problem is I can not get to the login prompt. I used Hyperterminal to access the console port. I only get this response from the ...

Hello there, I have an app server seating on my PIX's DMZ and I need to know how can I monitor (in real time) inbound traffic from the Outside interface (users out there) to the specific host 192.168.2.4 (app server) on the DMZ interface...Basically ...

I am currently getting this error on my 515 log. Can someone please tell me what I need to do to resolve it. I have two pix 515 firewall Primary and Failover. I am also using stateful failover. Here is the whole error. 305006: regular translation cr...

Hi.. All Pls expain how can I block P2P Applications such as emule,Kazza etc with Modular Policy Framework? Also to block certain file types to be uploaded to internal FTP server?

I have a simple scenario. A firewall with two interfaces,inside and outside. outside interface is 1.1.1.1/24inside interface is 10.1.1.1/24.I have hostA and hostB residing on the interface with IP address of 10.1.1.2/24 and 10.1.1.3/24, respectivel...

Has anyone experienced DNS resolution problems using BIND behind an ASA running 8.0(2) with the default inspection policies applied? Any help is appreciated...I'm seeing DNS requests go out to the internet, via packet capture, but nothing returning. ...

Hi,I have ASA 5520 running ver 8.0(2) and AIP-SSM-20 version 5.1(6)E1. I lost the password and in the process to recover I tried loading the image on AIP-SSM-20. The image I am trying to load is IPS-SSM-K9-sys-1[1].1-a-6.0-3-E1.img but the status on ...

Hello:Upon taking the config from a VPN 515E with 6.3(5) to an ASA 5510 with 7.2(3), I am presented with a very perplexing problem. I have 18 peers tied to the same crypto map for redundancy. On the Pix, it isn't a problem; however on the ASA upon lo...

Hi, i have set up the clock on my AIP-SSM 20, if i do a show clock it will display the correct time, but still in the event viewer the sensor UTC time is different, how can i have the correct time in the event viewer ? i have realized also that if i ...

Hello, I have two FW, on is a ASA the other one is a FWSM they're conected to each other via a vlan. So each one of the 2 Fw have an interface on the same VLAN.they are connected like this : Fw(10.1.1.1/24) <-> 6500 (used only for layer 2 connectiv...

250 remote sites use ezvpn to connect back to ASA 5520. Tunnels show active but do not pass any IP traffic. The only way to resolve issue is to "clear crypto ipsec sa". Has happened twice in the last 3 days. Logs show messages of denying traffic for ...