Network Security

During Ftp transfers on C2821 (ios c2800nm-advsecurityk9-mz.124-12.bin), I have:CBAC FTP sis 45D06014 FTP-Client: PASV~~CBAC FTP sis 45D06014 FTP-Server: 227 Entering Passive Mode (88,191,49,209,237,189).~~CBAC FTP sis 45D06014 Handle response to PAS...

Hi Netpros,This is my situation .. it is regarding to Webvpn access using the Cisco SSL VPN client.No rocket science .. I only need to provide full tunnel to some users and split tunneling to others (I know you can use the Cisco VPN client but th...

Hi all,I am running PIX 515e in a failover environment. The PIX has 128MB memory and currently it is using 113MB of the momory. Is that normal? How can I check where it is using this much memory? What is the maximum it can go without crashing?Thanks.

I have read the following definition a couple times:Transparent mode, the FWSM acts like a "bump in the wire," or a "stealth firewall," and is not a router hop. What I understand with the previous sentence is that: The FWSM connects the same network ...

We have a CSA Test server that we make lots of changes to on an ongoing basis. We'd like to know the recommended way to wipe out all of our changes and restore an original policy configuration. We'd also like to be able to import the policies fr...

Hi folks.I've searched through the online docs, but can't find a definitive answer to the following question:Can I upgrade the memory on a 5510 or 5520? I'm specifically referring to RAM, not to the flash/compact flash. One of my ASA's is only at 9...

Anyone know when this is coming out? Does it fix the sslvpn/Samba issue?

I am trying to configure an ASA5510 (v7.12) to allow an inbound connection over TCP port 9000. I have a web server on the inside that is listening on port 9000 (http://192.168.1.1:9000)I have setup a static NAT:static (inside,outside) 1.2.3.4 192.168...

Hi,If I use 2 asa 5510 with HA in mode A/A or A/P Is it possible in A/A mode to use one IPS module, except for security problem ?Or is it preferable to use asa as A/P.Regards

I have set up a VPN to a Watchguard Firebox. I thought it was a relatively easy build but now whenever the SA timeout occurs (8 hours), the VPN tunnel stays down. When I do a sh cry it appears to fail on the key exchange. Once, the remote site tech ...

Threat detection provides the option to shun addresses once a threat alarm has triggered. What is the shun timeout?

I want to put the ISDM "in-line" between my internet edge router and my firewall (FWSM which is in the same chassis as the IDSM). In order to have traffic flow from the internet edge router into the IDSM, then out of the IDSM to the FWSM, I will need...

Hello !!I am having some problems with ssl vpn and anyconnect client in asa 5505.The problem is, when I run the configuration wizard for SSL vpn, I follow the instructions and I type address pool for vpn users, add the anyconnect client, (anyconnect ...

I have the same scemario as in the example mentioned by the link below, but it doesnt work. I have opend a case with Cisco, got to tier 3 with no resolution ...I basically need to access from inside my DMZ servers on both the public and the dmz IPs. ...

Dear All,I have 1811 router with SDM , I wanted to enable the firewall capabilities using SDM to be in the medium level , in order to deny peer to peer and instant messengers.but I found the medium and high security levels are disabled.my IOS version...