Network Security

Hellowe have 2 ASA 5520 (Ver. 8.0(2)) uin active/standby failover. each asa has also an IDS module (ASA-SSM-10) in promiscuous mode.we have an failover almost every day/night .with "sh failover history" we get this output:"Service card in other unit ...

Hi, Are there any feature in the ASA that act like Policy based routing, so I can redirect certain traffic through certain interface.

It's been a while since working with PIX firewalls and one of ours in a remote location is starting to develop hardware issues (CPU fan). Trouble is, we've got it set to complete a static VPN tunnel to the location where I'm working at and the tunne...

HiHas anyone an idea how to get CS-MARS to properly parse custom signatures from an IPS 6.x? MARS seems to disregard both the name of the signature,severity and the new-to-version6 MARS category and regard everything as "Unknown event". Not much of a...

Hi, I'm looking for a general steer / experiences in implementing this using an ASA. Colleagues are steering me down a route of Microsoft ISA to provide thisfunctionaility.I kinda hope I can just use the ASA. Many Thanks,

Am in a spot of bother with getting my SNMP management station (running Solarwinds) to poll a PIX501 firewall at a remote location connected via VPN. The remote PIX501 had its peer changed from the PIX535 to a VPN Concentrator that sits side-by-side ...

Regarding Exchange7, it has been recommended for optimal Direct Push performance that we should increase the time-out value on our PIX525 firewall from the default to 15 to 30 minutes. Could you let me know how I determine the default value at presen...

I have a problem with a PIX 501 that allows you to establish a VPN session to a remote network (using the Cisco VPN client software) but does not permit you to ping any devices on the remote network. This problem only occurs with the PIX. I have sim...

Hi,We have CSA MC 5.1 runing and want to denay all spyware and some network access (snipping,icmp) to deny. I created customs Policies with rule modules for Application Install and network access and given Prioty Deny as Action but still I can instal...

Hello,I am trying to use the 7.0 ASDM after much heartache with the CLI. After doing much configuration on the CLI and then trying to access the ASDM I encounter a username and password window. I leave it blank and it doesn't grant me access. It a...

Not sure yet if this actually is a firewall issue…I am deploying a boot/build server. The DHCP and Boot Servers are on different machines but the same subnet. Clients on the same subnet as these servers are working ok however, with clients connec...

I may be having a possible issue with CSA 5.2. I am hoping someone out there can lend a hand. All CSA agents are in test mode (supposedly nothing is blocked, but events can be logged).Every now and then, a host with the CSA agent does not get a DHCP ...

I am at a Customer site today and am having a bizarre NTP issue occur.The customers outside Perimeter Firewall gets his NTP time from the Border Router (which syncs to tick and tock).I ran debug ntp events/debug ntp packets on the ASA, it gets a mess...

I have a Pix 506 that I'm trying to intergrated as a perimeter firewall.I've looked over the config and see no issues yet I can never get any inbound web services to function off of any of the static NAT statements.Both outside and inside interfaces ...