Network Security

hi netpros,customer is running a pix behind some loadbalancing facility in ha mode which when failover occurs changes its mac address. no gratious arp is sent.so pix is not reachable for 4 hours becaude of standard arp time out of the pix.so my quest...

A customer asked if the ASA can restrict internet access based on login, mac, IP, etc. They're also looking at content filtering, which the content services module will cover. I just didn't know if the ASA could actually make people log in to get ac...

Hi ALLKindly assist with this.We use a PIX 506E with 6.3 and 1 public IP Address. We want all machines (6)on inside network to connect to Internet while Internet user can connectto 2 services running on 2 machines inside.Inside Machine: a) web server...

Hi all,I'm going to setup an active/standbye cluster using ASA 5510's, but i've a problem so one of the ASA's hardware model is ASA5510-K8 while the other one's just ASA5510.Actually they are same as hardware but only difference is K8 according to ...

Hi friends,I have a firewall with inside, outside + 2 DMZ's.I am able to talk to the DMZ's from inside and outside interfaces but inter-MZ communication or communication between two DMZ's is not working.I have all the static translations and routing ...

Hi,I have a new ASA 5505 and I'm configuring it using the ASDM 5.2 client. The firewall is running in transparent mode. I was able to add some Access Rules, but I am having trouble trying to delete them.I get messages like this:[ERROR] no access-li...

Hello,Is there a way that one can see who and when has logged into the IPS device for a given period of time?

I am trying to install the Clean Access Server on a Dell PowerEdge 1950, but have run into an issue. The install works just fine, but after the reboot, I get a kernel panic error:Kernel panic - not syncing: Attempted to kill init!Loading mptbase.ko m...

The description is the same as well. Should this be a SubSig instead?

I have numerous IPS devices (IDSM2s, 4215s, and SSMs). I am trying to see if I can move them to an IPv6 address on the management interface. Anyone know the requirements or if this is supported?

We are moving to Cisco routers for VPN tunnels between client sites and our computer centers. On our site we isolate client networks and have independent ISP feeds for each client. As a result we need multiple routers on our site. Features need to in...

I need some information on the Cisco ASA 5500 series and UC520. It seems pretty confusing reading thru all the articles on Cisco's site and just doing Google searches. From what I gather, the base model doesn't come with IPS or anti-x features. If...

I cannot ssh to this pix anymore can someone please help quickly! Much appreciated.I have attached the running config.