Network Security

An excerpt from my ASA 5510 config:crypto ipsec transform-set myset esp-des esp-md5-hmaccrypto ipsec transform-set myset2 esp-des esp-nonecrypto ipsec security-association lifetime seconds 3600crypto dynamic-map cisco 1 set security-association lifet...

Hi,Last month when our PIX 515E was running into the memory leak problem (CSCsi53936)with PIX code 7.2(1) we were told to upgrade to the cisco interim code 7.2(2)22. So slowly we have been migrating our PIX 515E boxes to that code release in order t...

Hi, I am having problems with installing the Cisco Secure agent 5.2-203 on a RHEL 3.0 AS server. I gives me the following error [root@ABC CSCOcsa]# ./install_rpm.shRed Hat Enterprise Linux AS release 3 (Taroon Update 6)Preparing packages for instal...

Hi,I have two Pix firewalls in HA mode (Active/Standby). I can connect to the active firewall (F1) but not to the standby firewall (F2). I can ping the firewall F2 and the shaow fail advised that it is there and in standby mode. If i swop the firewal...

Hi,our users need to access internet via Ipsec VPN is that possible?we are using IPsec VPN Clients terminated in Cisco Routers.and for more clarification the VPN router is connected to the internet through a diffrent SP, if that possible how could be...

I have just installed an ISA server to handle internet requests from the clients. I want to create an acl on the ASA that will only allow internet access via the ip of the ISA server. If I create a static nat from the ip of the server to a public add...

I had an FTP issue when conections were slow and would drop out. I confirmed my NAT routing, access lists and service policy were all correct. I then noticed the command - ftp mode passiveI searched the CCO for information on this command and coul...

hi all i am having problem configuring ospf wih ipsec between 2 asa.i have followed he configuration example as it is on the cisco website. bu still the ospf neighbour doesn;t up on the outside. ipsec is working fine.has anybody tried this before.any...

Hi,I'm trying to upgrade a FWSM from 2.3 to 3.1.6 . I placed the new IOS on cf:5 and this boots fine but I'm having problems with the configuration file.According to the docs each cf has his own config file and once booted he doesn't accept 2.X comma...

i can configure IDSM-2 thru IDM but not able to find any signature thru.I am using 2004 ICMP sig. but i cannot find any thing.can you tell me how to test this.configuration is attached in file:shivlu

Hi friends,I am unable to access the main application partition image of IDSM-2.Even though i can access the maintenence partition of IDSM-2, i can't update the software on the app partition.I tried gaining console access to the IDSM-2 internal ports...

We have a number of customers who cannot properly transmit files to use via HTTPS since we moved from the PIX 6.X to the ASA 7.X system.The servers in question are connected to a CSS 11051. When we moved to the ASA, a small but significant number of...

Hi,Attached is my Network diagram where i hav placed the web content server, which is acting in bridging mode behind the firewall. i hav added two subnet ip address in that bridge, now the clientz in my LAN can able to speak each other ie. 192.168.1....

Using the management interface for ASDM, how should I setup the AIP? Currently my M0/0 is 192.168.100.1, the AIP is 192.168.20.2, the inside G0/2 is 192.168.20.1. The interfaces are all connected to a switch, with my management PC on Vlan 10, the M0/...

What is method for disabling NAT on FWSM and use ASDM. For high level to low level access and vice versa.