Network Security

Hi,I am setting up a IPSec remote access on an ASA (7.2.2). I am running into one strange issue. There is a 192.168.1.0/24 network on the Inside interface (EDC-INT)There is a 192.168.16.0/24 network on the DMZ interface (DMZ)The VPN pool is 192.168.1...

Ok so when I try to either delete rename or do anything with the file system I get the error stating that the file system is read only. More importantly I get the same error message when I try to save the config through the command line, I dont get t...

Is it possible to clear telnet sessions (for a FWSM)??. It seems we?ve reached the limit (5 sessions) and no one can telnet the device.Thanks in advance

I would like to use Cisco ASA's (any model as they are not yet purchased) to load balance my outbound Internet connections to two ISPs. I do not want failover, I want to use both connections so no one ISP connection sits idle.Can this be done? If so,...

I am trying to place a packet shaping device inbetween interface connecting to LAN via PIX inside interface. My PIX is in redundency mode , but after placing the packet shaping device (product Exinda)the show failover command output show interface in...

Dear All,I have sevaral vlans one each per floor configured on 6513 switch.Now i have to configure the FWSM for those vlans to do the intervlan communication and also i have vlan 20 for management purpose.Please give the FWSM configuration for those ...

Document ID:70559 and Document ID:77809 mixedWhen unplugging the cable to the router of the main ISP link, failover to secondary ISP router works fine. The router of the main ISP link is the monitoring target. When cable is replugged failover back to...

Has anyone tried using a dns wildcard in the system states ? I have a customer that uses something.net as common dns, but locally they get assigned to stuff like 123.something.net. If i use *.something.net it doesn't match, *something.net is a nogo a...

Hi all, I'm trying to enable logging for permitted traffic on FWSM running version 3.1 but with no success, I know it seems easy to do it but believe me I got frustrated trying. Note: I tried the same for the denied traffic and magically worked fine....

Hi, I have a pix 506e connected to a router A , router A has an interface connected to internet through leased line, and another interface connected to an ADSL router.if I want to redirect all ftp traffic from inside network to go through the ASDL ro...

the best way to monitor the traffic path through ASA and take capture of the traffics and vpn session for accounting

Havent used ASA before. Used PIX version 7 so i'm still not sure yet how different it is.We are running 7.2 on 5500s and they have set up each interface as security level 100 and configured same-security-traffic permit inter and intra-interfaceI am w...

Does anyone know how to tie a signature to an ACL that references a particular IP address or subnet? We used to be able to do it like this:ip access-list standard 50 deny x.x.41.21 deny x.x.72.93 permit any!ip access-list standard 51 deny x.x.98.72 p...

I tried today to upgrade my 1841 Adv Security from 12.4.6T7 using sdf v4 files to the newer v5 12.4.11T3. All went well with the initial config, three basic signatures activated. I used the v296 pkg file for the latest signatures.When I tried to copy...

This is strange.My ASDM workstation IP is 192.168.1.2My ASA is 192.168.1.1I cannot access the ASA with ASDM if I have the following line in my config: http 192.168.0.0 255.255.0.0 insideHowever, I *CAN* access the ASA if I change the line to be: http...