Network Security

Not sure if this is the right forum...I have two identical ASA 5520's that were purchased at the same time. I use them in an active/passive failover. This week I noticed that the displayed flash size on the active one was 64 MB and the flash size on ...

Hi,docs say that PIX/ASA sends a ping to discover destination MAC address. I can not find a reason for doing that... anyone can help ?

Hi all,Our firewall has the default timeout for idle connections and is set at 1 hour.i know i can change this, but my question is this :Is there a way that i can configure the firewall, to have different idle timeouts for for different groups based ...

I cant find this command under the system execution space or even in each contexts.

Hi, i want to apply websense to my ASA. But i want the free one, is there any?I want to use free online published url - ip resolver like http://centralops.net/co/. But i don't know if it can be used in ASA as Websense.Can anybody help me ? ^.^Thanx b...

Hi,I have read on a previous thread about QoS on the firewall an read the link provided.I have one question regarding QoS on firewallI have read that the QoS supports Priority traffic and Policed (rate limiting) traffic.For example:i have a 256K FR.I...

I am looking for the most efficient way to configure NAT exempt statements for a multiple interface ASA. I know I will need to write ACL's but do I write based on source and destination networks? Or source network to Any? Any suggestions would be gre...

I have a PIX-515E, Software Version 7.2(1) with NAT disabled, in router mode, and almost all inspection off. REcently i noticed that PIX randomizing TCP sequence in ICMP Frag embedded message, that is last 4 bytes of the packet. Looks like windows ho...

Hi, I've a question regarding the email topic: How's the behavior of ASA/PIX ACL vs Router ACL? Let's say for Router: R1 (s0/0) --- (s0/0) R2 --- CS-ACS - R1 has an inbound ACL on interface s0/0- R1 and R2 running OSPF- Therefore, we need a "access-l...

I have an interesting PIX issue. A client is trying to route outside traffic to a gateway in a different subnet. I have never seen this configuration before. According to the ISP, I need to run the following config.:ip address outside 206.138.x.x 255...

For the longest time I was able to connect to a PIX 506e using SSH Secure Shell, but now I can not. It gives this error message "Connection closed by remote host" We haven't made any changes to it. It just stopped working. Do you have any suggestions...

Can token base security implement by ASA for Servers or is there any document to do this....

When I configure subinterfaces on an ASA, how does the security level of the physical interface interact with the security levels of the subinterfaces? Can I make the subinterfaces security levels different from the security level of the physical int...

I have a frame connection to a class C network and want to segregate the traffic into four categories to be plugged into fa0 through fa3. I assigned an IP to fa4 and put vlan1 in switchport access mode with no ip but that does not allow firewalling u...