Network Security

We have a very busy vlan that we're capturing traffic from and sending it to a Gig port connected to an IDS device. Approximately 20% of the traffic is either being dropped by the switch capture port or the IDS device. We've been told 3% dropped traf...

My ASA 5520 has been working well for the past 6 months. Most of the clients connections are IPSec/NAT-T. Today one of my clients connected for the first time and they just connected IPSec. The IPSec client could not pass traffic across the VPN. Thus...

I have got two server AS400 whit mapics, and two asa in failover but i cannot put my server in "inside", the firewall support sna?

Hi ALL,My customer has performed a PIX migration to ASA5520 on last weekend. And the configuration on the new ASA5520 is almost the same as the original PIX515. There are several L2L vpn tunnel configuration on the ASA5520. After the migration, all V...

Is there a heuristic for setting up an intrusion detection system with a Cisco ISR? We would like to utilize our firewall logs for an intrusion detection system.

Hello. Our company is about to invest in the FWSM modules for our two 6500's in order to zone our internal network. I was wondering if there were any specific training courses that dealt with these, or are we better off taking a PIX course? We curren...

I have the need to use Websense URL filtering for multiple remote sites that are connected via IPSEC with PIX 501s. A customer has an ASA 7.2 for the hub, and several PIX 501 6.3 for remote offices. They want to allow split-tunneling VPN while using ...

Hi I have an ASA 5520 running version 8.I noticed in a sho int, that packets are being dropped on an interfaces and there are overruns.I have checked the sho int again after a period of time and the overruns are not increasig but the packet drops are...

I don't know the maximum of translation slots available when PAT is used1) PAT uses the high ports for translations; therefore the available translation slots per IP are calculated via 65536-1024 = 64512.2) Almost unlimited as a hash value is used to...

Hi, do you know about incompatibility between oracle 10.x on linux and ASA 7.2.x version ?The same application runs with PIX 6.3(4)thank you in advance, but with ASA the session allows traffic flow but remains in idle state after particular commands....

Hi,This should be an easy question.In PDM there was a function were you could assing a name to a subnet/Network.Can this be done in ASDM, I am probably doing something stupid.Under the firewall configuration Tab I have an address bar on the right. I ...

hey guys,can anyone help me? i work for a university and we need to allow our students to be able to initiate a session to an external client using ichat. But i dont want to have to do any static nats...we have about 3000 students and it would be pre...