Network Security

I am unable to find documents on CCO that explains error messages on ASA5520. "%ASA-2-106001: Inbound TCP connection denied from x.x.x.x/1266 to x.x.x.x/22 flags SYN on interface outside" registered on ASA5520 7.2(2)22. Does anyone know what this mea...

Hi all,I have an odd problem on two PIX515 on two seperate customer sites.The customers are able to access alll web sites OK through the PIX (http and https) with the exception of the personal banking pages of HSBC and FirstDirect.Does anyone have an...

I'm seeing a lot of events in our ASA logs for 106001 relating to external source TCP (port 80) connections being denied inbound to our PAT address. The sources are all valid web sites which users are accessing. If a source inside connects to a websi...

Hi all,All is in the title !Is there a way to reset a PIX515 to default configuration FROM MONITOR MODE.Why in monitor mode ?In fact I have sent a configuration using tftp into startup and reloaded the PIX. After this, the PIX boot normally until the...

I've been trying to make this work and have had no luck. I've got a 515E running 7.0(2) and attempted to use this command to allow hosts on my 172.17.150.0/24 subnet to browse the website on 69.90.71.85 ; static (outside,inside) 69.90.71.85 172.17.15...

I have a client that sends periodic bulk mail to their members. When they do this it completely floods their DSL connection.Is there a way with an ASA5505 to do packet shaping to limit the amount of smtp traffic to no more than 50% of their upload sp...

Hi All,I have 2 pix firewalls in failover mode. All of a sudden the primary started dropping all traffic on the inside interface.when doing a sh log I was seeing litterally hundreds of Deny UDP reverse path check errors on the inside interface. the l...

On the WAn egde which is best technology to use among PIX and cisco IOS firewall?

Is it possible to do clientless SSL VPN to a Pix? I believe this is possible with the ASA 8.0 code. But I am having finding that specific about the Pix in my googling. Thanks.

hi all, i'm getting a lot of dropped packets in ios firewall. Anyone can enlighten me why there are these few default dropping functions ? what are the effects on my network? how do i disable/tune the dropping mecanism ?Due to RST: 503024: Sep 3 10:3...

I would like to know if the ASA5505 supports load balancing of dual ISPs, the docs say they do but all the configs docs talk about failover only. Has any one configure an ASA 5505 so that i would load balance 2 ISPs, I have a lot of users (for the ba...

Good day,My name is Lucian Nedescu and I need a cisco product advice. I attached a scheme to present my company needs whitch is a small company. We wish to protect our network as presented in the scheme. We do not need to know how to do it, we need t...

Hello Experts!Is there any way to query my PIX 515e to get a list of all it's current connections? I realize this could be ALOT, but if I get a trap that the connection upper-threshold has been reached, I would like to know what those connections are...

Is there a way I can export / view all signatures that have tcp rst?

I have a pix 501 and 4 video conference units. I have static nat setup for them and allow inbound any network with range 1024-65535. Are there any tips or configs to make sure those h323 packets/frames traverse the firewall as quickly as possible? Sh...