Network Security

Document ID:70559 and Document ID:77809 mixedWhen unplugging the cable to the router of the main ISP link, failover to secondary ISP router works fine. The router of the main ISP link is the monitoring target. When cable is replugged failover back to...

Has anyone tried using a dns wildcard in the system states ? I have a customer that uses something.net as common dns, but locally they get assigned to stuff like 123.something.net. If i use *.something.net it doesn't match, *something.net is a nogo a...

Hi all, I'm trying to enable logging for permitted traffic on FWSM running version 3.1 but with no success, I know it seems easy to do it but believe me I got frustrated trying. Note: I tried the same for the denied traffic and magically worked fine....

Hi, I have a pix 506e connected to a router A , router A has an interface connected to internet through leased line, and another interface connected to an ADSL router.if I want to redirect all ftp traffic from inside network to go through the ASDL r...

the best way to monitor the traffic path through ASA and take capture of the traffics and vpn session for accounting

Havent used ASA before. Used PIX version 7 so i'm still not sure yet how different it is.We are running 7.2 on 5500s and they have set up each interface as security level 100 and configured same-security-traffic permit inter and intra-interfaceI am ...

Does anyone know how to tie a signature to an ACL that references a particular IP address or subnet? We used to be able to do it like this:ip access-list standard 50 deny x.x.41.21 deny x.x.72.93 permit any!ip access-list standard 51 deny x.x.98.72 p...

I tried today to upgrade my 1841 Adv Security from 12.4.6T7 using sdf v4 files to the newer v5 12.4.11T3. All went well with the initial config, three basic signatures activated. I used the v296 pkg file for the latest signatures.When I tried to copy...

This is strange.My ASDM workstation IP is 192.168.1.2My ASA is 192.168.1.1I cannot access the ASA with ASDM if I have the following line in my config: http 192.168.0.0 255.255.0.0 insideHowever, I *CAN* access the ASA if I change the line to be: http...

Help requiredI have set up a small home network to practice configuring a site to site vpn on two pix firewalls using certificates for authentication, the pix's I am using are a 515 running ios 7.0(5) and a 501 running ios 6.3(5).getting the certifi...

Hello, I have PAT configured on a 2851 router, I have to create an access list that restricts the "outside world". I allowed HTTP to come into my network, but since this interface has PAT configured it is using dynamic ports for conversations and the...

HiI am about to charge into the CCSP and I am having trouble trying to choose the correct equipment.From what I have manged to pick up on, would the following be overkill (thinking of cost here) and if so what are the best alternatives?Cisco PIX-515-...

Hi,I have just swapped over to PIX v7 but I'm having problems with a external site. It hosts OWA 2003 and when internal users log in and try to download an attachment they get a error 'Internet Explorer was not able to open internet site.....etc'. No...

I have PIX 515E. Last day i update from version 7.1(1) to 7.2(2). Update is successfully.I have a mail server on dmz location. Before update mail incomming and outgoing is ok.After update to 7.2(2) problem is that mail not received from outside but s...

Just a general question. Thanks to several of you, I was able to perform port redirection on one of my external IPs and redirect it to a different address and port on the inside.However, since I did this, I find that I need to create static entries f...