Network Security

Why does the Firewall Services Module source the mac-address of the inside interface and not the mac-address of the outside interface when passing traffic outbound out of the outside interface to the outside world?

Hi to all,I have a problem with a virtual workstation XP SP1 (VMware) with VPN connectivity: when i accessed as standalone user i don't have any problem, but when i put it into domain and login with a user domain account, the login process crash (onl...

I've received a new asa5520 with aip-ssm (ssm-20). I have upgraded the ASA image to 7.2(3) successfully. I am trying to upgrade the SSM module from 5.1(6)E1 to 6.0(3)E1. I have the following connectionsSensor IP: 10.0.0.3ASA G0/0: 10.0.0.2Gateway: 10...

I had the 5505 installed about a month ago and it was working great, showing events. But as of today it shows nothing. I go to the Real-Time log viewer in the ASDM, choose Informational (or any other option) and it brings up the real-time window but ...

Have an ASA running v8, trying to figure out how to block inbound Cisco VPN client traffic to the external interface and only allow 1 block of public IP's to initate the connection. I have created access lists blocking all inbound traffic on the exte...

I'm a beginner with IPS, but I'm confused with the terms packet and content filter, when I'm looking in some documents on the web they are talking about packet filtering; statefull packet filtering etc ..., I see also the term content filtering, what...

I have setup CSA for several users. One of the log messages we receive on many hosts is the UPNP port 1900 blocked messages. I would like to leave the rule itself alone so we can use it in other groups, so I created an exception. I set it up as a hig...

I am changing from VPN3000 to Cisco ASA but when i try to move the pre-shared keys for VPN-groups from Cisco VPN 3000 it contains the character ¤ which seems to be unsupported in Cisco ASA but supported in VPN3000, does anyone know? The ¤ is typed ...

In the last few weeks, we are seeing consistent high CPU on one of the IDS devices-- staying at 100% for hours. My question: what affect does this have on analysis? Will events begin to be dropped?

Every few months PIX stops passing outside traffic for HTTPS (443) port for Exchange server OWA ( internally it works just fine). When I look at xlate it shows 0 bytes and flags aB. I change rule to port 4343 and it works. After a few weeks I change ...

Hi I am abouto to establish a l2l tunnel with remote site. But they say that my local network 10.10.10.0/24 is already in use at their site, so they want me to NAT my local network and go through the tunnel. I have ASA 5540. I have just 3 hosts in he...

Hello,I've got 2 ASA 5520 on my network.The first ASA (Firewall 1) realize site to site VPN between Datacenter et remote office, and the second ASA (firewall 2)do exactly the same thing, for other remote office.As you can see on attachments, "Firewal...

Hi all,Is there a clever way to log e.g. enrollment requests coming in on an IOS ca server?What I'm trying to do is to get the embedded event manager to email a notification to the admin staff, when an enrollment request arrives at the ios ca server....

Has anyone seen this on 5.2?: I have a service restart rule that is only to be applied when the rule module it's associated with is in a system state of medium. However, when I set security to high, and then stop the service, the service restart rule...