Deny inbound icmp src inside:192.168.50.1 dst inside:10.100.107.24 (type 8, code 0)The 10.100.107 network is across the tunnel. When I attempt to access that network the tunnel comes up, but I can't get across.I do have 10 network on my side.
What's the best strategy for viewing IPS real time events from multiple IPS devices now that VMS has been made EOL?There was a nice single view of all IPS events from all IPS devices being managed in VMS and I was wondering where I can tell people to...
We have changed the configuration through the IDM on the local sensor. Now we have to re-import so CSM is synched up. The interface has changed substantially. Has anyone done this yet?
We recently added a failover 5520 with the ASA-SSM-20, which matches the primary ASA/IPS. My question is I just upgraded the primary IPS to 5.1(5)-E1. It went fine, except now the failover IPS is still on 5.0(2). How do I update the failover IPS to m...
I need some input on upgrading my existing CSA MC 5.0 to CSA 5.2 on a seperate server. If I do this will I have to reinstall all of the CSAs on my host servers? The documentation indicates use of migration tools...is that referring to the import/ex...
Hey guys.I have a typical dual FW-pair DMZ, with dual-homed servers on different Pvlans.Now, when I want to send traffic to the inside FW (a 6509-FWSM), we use two 4948's with static routes pointing to the FWSM virtual DMZ interface. The 4948 have L3...
We have a 5520 and just added a failover unit. I just upgraded the IPS to 5.1(5)-E1 on the primary, so when it reloaded, it failed-over to the secondary. Now I can't make the primary active again, nor can I login to the secondary. I get the user ID a...
I haven't finished my research, but this signature seems to trigger on the TXT queries used by SPF(http://www.openspf.org/). Anybody else run into this and were you able to resolve?
Hi please Help if you can I'm trying to access from the outside interface using ping from a router 172.24.16.5, where there is a ip route 172.24.16.8 255.255.255.255 172.24.16.7 The device i'm trying to ping is on the inside side of the pix and has i...
Dear sirs,i have cisco pix 515E with three interfaces Fastethernet0, Fastethernet1 and built-in in the pix and Fastethernet2 which is module.i upgrade it to ver. 7.0when i connect the firewall the fe0 and Fe1 is bring up and the light is ok but i can...
I have a site to site VPN tunnel established between a PIX 506E and an ASA5520. I am able to ping across the VPN to the DNS server and I am able to ping from the DNS server to the remote computer I am using for testing.This is going to be implemente...
I have a customer who is adding a second internet T1. The ISP delivers the Internet as ethernet via their CSU/DSU. It seems the ASA cannot load balance two outside interfaces so I seem to have to add a router between the ASA and both ISP connection...
Hi,I got 2 6509 with one FWSM in each one. My default licence allow me only 2 context-fw. I would like to buy the licence "FR-SVC-FWM-VC-T2" which is for 50 context-fw. I'm using the firewalls in Active/Standby. Do I need to buy 2 of this licences or...
Hi,I have a problem on connecting to the server from one pc client end. The access list and static already been applied. The capture log shows below:17:28:17.846101 129.1.16.121.4280 > 10.30.6.142.81: S 1745184384:1745184384(0) win 65535 <mss 1460,no...
