Network Security

My ISP has given me two different ip ranges, a /30 and a /29. The /30 is to connect to them, and the /29 are all mine to use.Normally, I'd set up a router to translate between the /30 and the /29. give the router the first address, the fw the second ...

Hi,After upgrading my asa devices (2*5510) I started to getting odd messages which relate to lan-to-lan connection between these:Dec 4 03:18:15 stasa1 %ASA-3-713227: IP = A.B.C.D, Rejecting new IPSec SA negotiation for peer D.C.B.A. A negotiation was...

I have 5 (soon to be PowerEdge servers that I want to firewall and have only certain ports (HTML, RDC, FTP) open. Each server has its own IP on the web. Wire comes in, goes to a 3COM switch, then to individual Linksys routers, then to the Servers. I ...

Why does the Firewall Services Module source the mac-address of the inside interface and not the mac-address of the outside interface when passing traffic outbound out of the outside interface to the outside world?

Hi to all,I have a problem with a virtual workstation XP SP1 (VMware) with VPN connectivity: when i accessed as standalone user i don't have any problem, but when i put it into domain and login with a user domain account, the login process crash (onl...

I've received a new asa5520 with aip-ssm (ssm-20). I have upgraded the ASA image to 7.2(3) successfully. I am trying to upgrade the SSM module from 5.1(6)E1 to 6.0(3)E1. I have the following connectionsSensor IP: 10.0.0.3ASA G0/0: 10.0.0.2Gateway: 10...

I had the 5505 installed about a month ago and it was working great, showing events. But as of today it shows nothing. I go to the Real-Time log viewer in the ASDM, choose Informational (or any other option) and it brings up the real-time window but ...

Have an ASA running v8, trying to figure out how to block inbound Cisco VPN client traffic to the external interface and only allow 1 block of public IP's to initate the connection. I have created access lists blocking all inbound traffic on the exte...

I'm a beginner with IPS, but I'm confused with the terms packet and content filter, when I'm looking in some documents on the web they are talking about packet filtering; statefull packet filtering etc ..., I see also the term content filtering, what...

I have setup CSA for several users. One of the log messages we receive on many hosts is the UPNP port 1900 blocked messages. I would like to leave the rule itself alone so we can use it in other groups, so I created an exception. I set it up as a hig...

I am changing from VPN3000 to Cisco ASA but when i try to move the pre-shared keys for VPN-groups from Cisco VPN 3000 it contains the character ¤ which seems to be unsupported in Cisco ASA but supported in VPN3000, does anyone know? The ¤ is typed ...

In the last few weeks, we are seeing consistent high CPU on one of the IDS devices-- staying at 100% for hours. My question: what affect does this have on analysis? Will events begin to be dropped?

Every few months PIX stops passing outside traffic for HTTPS (443) port for Exchange server OWA ( internally it works just fine). When I look at xlate it shows 0 bytes and flags aB. I change rule to port 4343 and it works. After a few weeks I change ...

Hi I am abouto to establish a l2l tunnel with remote site. But they say that my local network 10.10.10.0/24 is already in use at their site, so they want me to NAT my local network and go through the tunnel. I have ASA 5540. I have just 3 hosts in he...