Network Security

GreetingsI've been running two firewalls for some time now, one Pix serving our web applications and one FWSM serving both users and some web application servers.After the migration the FWSM is set up like thisInternet|| FWSM----ApplicationNet----PIX...

I am running 8.0(2), look at the following output from ASA:ASA5500#sh interface gi0/0Interface GigabitEthernet0/0 "Outside", is up, line protocol is up Hardware is i82546GB rev03, BW 1000 Mbps, DLY 10 usec Auto-Duplex(Full-duplex), Auto-Speed(1000 Mb...

Hi, I would like to know is it possible/advisable to have 2 ISP links on PIX515E interfaces so that if one goes down the other will be up for outside users to access the server services inside the PIX local LAN with out any service disturbance. Pleas...

Hi...I?ve configured my Cisco ASA 5510 Firewall with four subnets. Each one for different purposes, described as following:100.130.101.0/24 network. Named UnTrust network is use it for all user inside the office.100.131.101.0/24 network. Named Trust ...

Hi,I have 2 locations. Location A & Location B.VPN client connection will terminate to Location A firewall (ASA 55520). Users will get ip from the vpn-pool created into Location A firewall. By using this IP users will access a mail server that is loc...

Yes, the ASA outperforms the old PIX in all categories except one. Has anyone noticed that the amount of IPSEC vpn connections in the ASA is drastically lower than its PIX predecessor? Could it be that the ASA is now doing software based incryption v...

Upon adding a IOS IPS device running (C2800NM-ADVIPSERVICESK9-M,Version 12.4(15)T1,)& 5.x-303 release signatures, CSM 3.1 does not display it as an IPS enabled device. The device in question (2821) has a stand-alone config and 5.x advanced signatures...

I am having trouble with IPSecs dropping every few hours. I would like to capture some debug info to see if I can figure it out. When I do "logging buffered" I get way to much info and find it hard to decipher. Is there a way I can use the "debug cry...

I have an IDSM version 6.x set up to monitor both directions of traffic on a Cat6500 VLAN with an average 150mbit/s traffic. Except during low traffic times the missed packet counter is almost always at 23%, is this too high? Is there something I can...

I have just made two ipsec vpn connections to our main office PIX 515 v6.3 using Linksys WRV200 and BEFSX41 at remote offices. Everything is working like charm between SBS 2003 server and remote locations. The problem is with our terminal servers (Sc...

My ASA is running OS 7.1.2. Routing is handled by OSPF and static routes. No default or 0.0.0.0 route is defined or learned. I want to add a default route but not advertise it with OSPF. How would I do this? I am was thinking distribute lists but I c...

Hi,Our customer has two ASA5550-K9 and asks us to configure both firewalls in transparent mode. These firewalls are design to protect traffic between outside and inside.The 1st firewall's outside interface connect to first router 3825. The firewall's...

All,I had a situation where traffic needed to be blocked from one subinterface on the ASA to another, Security-level was setup the same with appropriate NAT and intra security level permissions. The thing was that the ACL needed to be placed signifyi...

can anybody expalin me multicasting functionalities

Hi,does anyone know if the ASA 5500 support http redirect. for example, a pc on the internal network access www.cisco.com and he gets redirected through a proxy server on the internal network instead for login etc.... This saves the customer going th...