Network Security

What's the conf required on FWSM to disable VPN/IPSEC traffic inspection or to allow VPN traffic explicitly?

Ideally I would like to place an ASA 5510 in line between three devices on the same subnet and have the traffic between them inspected.For example the network 10.10.10.xEth0/0 would have input coming from 10.10.10.1Eth0/1 would have input coming from...

I need to get passive FTP to work through my 877 routers firewall.The only way I seem to have been able to do it so far is by allowing the 20 and 21 ports in which is fine but I also have to allow the range 1024-6000 to come back in otherwise the con...

HiI have a scenario where an IDSM with IPS 6 is triggering on traffic from a non-trunk interface but when the same traffic passes over another VLAN on a trunk.Monitor setup is like thismonitor session 10 source interface Gi1/2monitor session 10 sourc...

Is this the correct command to set the boot image?boot system disk0:/pix803.bin

Hi,is there anyway that we can enable this inspection in Firewall Service module? the escenario is we need to use an external company's VPN software inside our org and its not working. The traffic needs to cross FWSm to reach internet. so thought of ...

I replace a linux firewall with a ASA5505-sec-bin-k9. The customer have two remote sites conected in the following way: The carrier deliver a LAN connection, a 10/100 wire. But I know the provider has two routers, one goes to a the first remote site ...

Why don't signatures 1301 and 1304 produce alert even if "Produce Alert" event-action is specified for those signatures (promisc. mode)? Is it possible to send RST or shun a connection in promisc. mode when those signatures fire?

Hi,This is sivaji and it will be gratefull if you give the support on this.We have datacenter and all the servers located in datacenter. From dataceter to our office we have point to point line conneted to Cisco routers. We have ASA in datacenter and...

Was curious if CSC could manage and provide IOS updates for 1800 class routers w/Firewall IOS.

I am looking to add multiple web pages to an existing web server. I have rules in place for our existing web server to allow traffic from the outside and static pass it from the outside address to the DMZ address. I want to add additional unique web ...

I'm currently running a Pix 525 with a failover. I'm on version 7.2(2) not sure which version to upgrade to? Has anyone had any experiences with 8.0(3) or 8.0(2) good or bad. thanks

Hi,I have the situation in the attachment.I've set up a remote access vpn for client 2 to access some networks behind R1 and R2. There is no NAT involved. The network uses OSPF. The routes are injected into OSPF using RRI. I've activated the same-sec...