Network Security

Greetings,We have two ASA5520s, both at 7.2(2) running in active/standby failover. Each of the ASA's have an AIP-SSM-10 in them running 6.0(3)E1. The configuration is in promiscuous mode assign to global policy, all traffic. The primary will be runni...

Hi,I'm trying to do the following. | | Monitoring ____|___----inside | asa | outside ------ --------inside is 10.0.0.0/8outside is 87.1.1.1/30Monitoring is 10.88.1.2/24The problem I have is that traffic coming back to monitoring workstations that is ...

I have 2 ASA's they have both been running for over a year. Suddenly 1 stopped passing SMTP traffic. I couldn't telnet via port 25 either. A quick google search and I find a tip that says to take out the fixup SMTP line from the config. Suddenly the ...

Hi,I have one AIP-SSM-10 in ASA 5520. In show module it is showing Unresponsive. I tried to reimage the module using hw-module module 1 recover configureandhw-module module 1 recover bootbut it is not taking anything from tftp server. From my ASA tft...

We are planning to ios upgrade from 6.3 -to 7.2 Is there a Cisco url that summarises all security advisories (if any) for 7.2 - to help us ensure a secure firewall with 7.2 ? Thanks in advance, [email protected]

I have used nat0 command to transfer outside ip address directly to inside users.But whenever my pix reboots nat (Interface) access-list 100 command erase automatically& i will have to reconfigure it every time by changing access list name .Please gu...

Hi,I have an admin context with several firewall contexts. I am in the process of renaming a few vlan names. I can rename the vlan names in the individual context by giving "no nameif" and then "nameif".But how do i rename them in the admin -vfw sinc...

Hi, Kindly find the attached file.In that i can ping from DC network to F3 network. but i m unable to ping s1 from DC.i can ping s0 from DC.the same way i can ping DC network from R1 router.but from R2 router unable to ping..For that i have checked t...

Hi folks.On my ASA 5520 I have an interface that connects to a layer 2 switch for DMZ servers. I regularly get the syslog below whenever the DMZ servers send out a broadcast (which is, of course, quite often.) What's the best way to make this message...

I have the IPS set to promiscuous mode. Have a policy map set don't see it doing anything I get no reports or logs I see no traffic on it.How do you know what it's doing? or get it to do something?I don't even know what questions to ask as the docume...

Hello,I'm using ASA with SSM-10 module for IPS.When trying to access with ASDM to the IPS it tells me that there is no license included, unless that the IPS works normaly. and also when checking for IPS licenses I found nothing.They told be that I ne...

Does anyone know how to be able to copy run tftp from a transparent context to a share-server? We have routed contexts which I can copy the configs all day but since there is no IP we can't do this. I've tried adding a BVI to the context but no luck....

We are running Active Directory and this sig is firing 30000+ times a day. I do not want to disable the sig as we would likt to watch for external IP's as the source or destination.Trouble is I cannot get an event filter to work for this beast and I ...

Hi, I have a few questions on load balancing OUTGOING internet traffic through the ASA5540 firewall running code version 7.2. My company has 2 internet links going to the same ISP and the firewalls are running in active/standby mode. I would like to ...