Network Security

Im about to upgrade my firewall to 3.X from 2.x and in addition add a new 6513 core switch which also has a FWSM. I want to set the 2nd 6513 FWSM in active active mode with the orginal switch.... Does anyone have a sample configuration for this? I ha...

HiI format my pix 535 flash. then after I enter ROMMON mode. when i upgrade MY image first I give command 'interface 1' then message come Ethernet ===port 1 could not initiallid==so i can not give ip address .now how can solve this problem .ThanksBip...

Helloi have a set up with a Cisco ASA 5520 with remote access VPN (using Cisco VPN client) and 3 different VPN group policies, each with different levels of access. the Users are authenticated using RADIUS against a Windows server 2003 Active Directo...

I have an ASA5505 with one site-to-site vpn policy to subnet "A", subnet "B" is the local subnet behind the ASA5505. I have a remote-access policy set which allows vpn client to remotely connect to the ASA5505. My desire is to allow the remote users ...

Does the PIX reset the QoS DSCP values in the IP packets through it?

Hi,Can anyone told me, how can I autmatically download the IPS 6.x Sig an SP update-s, if I didn't use CSM?Is there any solution?ThxTamas

Cisco released S284 and S285 this week, but for IOS IPS in Mainline and T-Train Releases prior to 12.4(11)T, there are no updates on CCO. Has signature update support for prior to 12.4(11)T stopped? Did I miss an End of Life notice? If not, how long ...

HiI have pix 535 with failover os 7.0.When I am connect the firewall to network some of days it changes Active to passive. now last two days primary router auto reboot. when Primary router reboot then time failover ruter active and after some of hour...

Just got a new ASA 5510 and I am having a hard time letting any trafic through. I can ping the outside interface xxx.xxx.xxx.xxx but none of the ports are open.Ethernet0/0 outside xxx.xxx.xxx.xxxEthernet0/1 inside 10.10.10.10The nic on my iis server ...

Hi, Kindly Indicate for below scenario, Static necessary or not for Inbound Conncetion If I need to hide my Internal IP Address to Outisde Users.I am not able to access my Inside Server. nameif ethernet0 outside security0 nameif ethernet1 inside secu...

I have got 2 no's of asa 5520 one gest hanged in around 40 minutes and the other does not boot up, the LED for the poser does not come up, led for the flash is amber and the, vpn amber pleas let me know what could be the problem.thanks

Hi,If I have interfaces which are up but were left with no IP addresses; is there any risk for L2 attacks here if somebody got physically connected to any of them?Regards,Haitham

I have a PIX 525 that connects to a 6508 switch. The switch port is configured to auto and the PIX is 100 full. I trying to connect packet filter box in between. If I change the port configuration on the 6509 to 100 full, traffic drops. If I put it b...

Hi,I am reviewing the PIX config of my client who is configuring deny ip any any ACL on the failover interface between the 2 failover units!! I was confused of this configuration and just would like to check if this will deny the stateful information...

How do you troubleshoot drop packets on the asa. What could be the cause?ciscoasa# show interface insideInterface GigabitEthernet0/0.100 "inside", is up, line protocol is up VLAN identifier 100 MAC address 0018.73d6.eb96, MTU 1500 IP address 192.x.x....