Network Security

there are many log type what the best that i take for ASA to minmize the size of log file

I am starting to notice some issues with this release. I have already noted that there appears to be issues with telnet/ssh/asdm access through an IPSec client to the management IP address of the PIX. I am also noticing that everytime the firewall is...

Hi,I am studying load balancing outbound Internet traffic through two ASA 5540's in active-active mode. Is this possible with just one subnet on the Inside? Even with two subnets, is real load-balancing (dividing packets or sessions based on individu...

Recently upgraded LMS2.5 to 2.6. Syslogs have stopped to appear in DeviceCenter/SyslogMessagesReport for all devices. Whereas it is getting logged in /var/log/syslog_info. All filter in RME/Syslog/MessageFilter disabled and changed from Drop to Keep....

What is the difference between Port forwarding, port range forwarding, PAM?Can these also be achieved by PAT?

Let me start by defining the end goal: Utilize an active/active ASA to filter traffic on specific network segments (VLANs). There is a 3750 stack which is acting as the VTP master. I'm having trouble understanding how routing will work in this scenar...

What is the items needed to start using NAC on a network? As far as what routers are supported and are there any servers needed to run software and the clients, etc?

We have a pix 501. I have a primary Ip on the outside interface of 68.x.x.21I have a secondary IPaddress of 68.x.x.17 that handles incoming mail request. Tne problem is when I send mail through this pix the ip address shows up as 68.x.x.21 and not 68...

We are changing our T1 server to an other company; I know I need to change the IP address to the new provider on the outside, do I need to change the translation table and all ACL?s assoc with the old IP address. It would greatly appreciate if someon...

The ASA 5520 is configured for Transparent mode. Whenever I telnet to the ASA management IP address via telnetting from another device such as a 3560 or 2960 switch and issue a "show run" command, I receive a partial output of the ASA config, then th...

I have configured my ASA5520's for active/standby failover and I keep getting this warning everytime the active replicates to the standby:WARNING: tunnel-group <tunnel_name> Does not exist. Has anyone seen this before?

I do have a 6509-E with the FWSM module, I created two context within the FWSM, context A and context B, both in transparent mode.Context A is "conected" to the MSFC via BVI with the IP 192.168.180.2, the MSFC IP for VLAN180 is 192.168.180.1, in cont...

I have Pix 501 firewall and need to open ports 5631 & 5632. Can anyone provide me with step by step instructions? Thanks

I can ping the FWSM interface that is directly connected to my inside network, but I am unable to ping outside interfaces. All applications(like http, ssh etc) from inside network to outside works fine. I can also ping switch's vlan interface which c...