Network Security

With IOS, I'm accustomed to looking at releases and choosing one that is GD(General Deployment), avoiding LD releases or other special branches. With the ASA software, I can't find anything specifying whether it is considered ready for general deplo...

Hello,We are a windows 2003 network and use an ASA firewall. We can trace route from the ASA device but not at our desktops...do you know the syntax we need to add this to our outside access-lists? TIA, Gary

I have a 5510 sec + 7.2.2. It is the failover. It was working fine could reboot the box no problem. Now it is constantly rebooting stating it can not find the boot file. How do I recover this?

GreetingsI've been running two firewalls for some time now, one Pix serving our web applications and one FWSM serving both users and some web application servers.After the migration the FWSM is set up like thisInternet|| ...

I am running 8.0(2), look at the following output from ASA:ASA5500#sh interface gi0/0Interface GigabitEthernet0/0 "Outside", is up, line protocol is up Hardware is i82546GB rev03, BW 1000 Mbps, DLY 10 usec Auto-Duplex(Full-duplex), Auto-Speed(1000 M...

Hi, I would like to know is it possible/advisable to have 2 ISP links on PIX515E interfaces so that if one goes down the other will be up for outside users to access the server services inside the PIX local LAN with out any service disturbance. Pleas...

Hi...I?ve configured my Cisco ASA 5510 Firewall with four subnets. Each one for different purposes, described as following:100.130.101.0/24 network. Named UnTrust network is use it for all user inside the office.100.131.101.0/24 network. Named Trust ...

Hi,I have 2 locations. Location A & Location B.VPN client connection will terminate to Location A firewall (ASA 55520). Users will get ip from the vpn-pool created into Location A firewall. By using this IP users will access a mail server that is lo...

Yes, the ASA outperforms the old PIX in all categories except one. Has anyone noticed that the amount of IPSEC vpn connections in the ASA is drastically lower than its PIX predecessor? Could it be that the ASA is now doing software based incryption v...

Upon adding a IOS IPS device running (C2800NM-ADVIPSERVICESK9-M,Version 12.4(15)T1,)& 5.x-303 release signatures, CSM 3.1 does not display it as an IPS enabled device. The device in question (2821) has a stand-alone config and 5.x advanced signatures...

I am having trouble with IPSecs dropping every few hours. I would like to capture some debug info to see if I can figure it out. When I do "logging buffered" I get way to much info and find it hard to decipher. Is there a way I can use the "debug ...

I have an IDSM version 6.x set up to monitor both directions of traffic on a Cat6500 VLAN with an average 150mbit/s traffic. Except during low traffic times the missed packet counter is almost always at 23%, is this too high? Is there something I can...

I have just made two ipsec vpn connections to our main office PIX 515 v6.3 using Linksys WRV200 and BEFSX41 at remote offices. Everything is working like charm between SBS 2003 server and remote locations. The problem is with our terminal servers (Sc...

My ASA is running OS 7.1.2. Routing is handled by OSPF and static routes. No default or 0.0.0.0 route is defined or learned. I want to add a default route but not advertise it with OSPF. How would I do this? I am was thinking distribute lists bu...