Network Security

We recently added a failover 5520 with the ASA-SSM-20, which matches the primary ASA/IPS. My question is I just upgraded the primary IPS to 5.1(5)-E1. It went fine, except now the failover IPS is still on 5.0(2). How do I update the failover IPS to m...

I need some input on upgrading my existing CSA MC 5.0 to CSA 5.2 on a seperate server. If I do this will I have to reinstall all of the CSAs on my host servers? The documentation indicates use of migration tools...is that referring to the import/expo...

Hey guys.I have a typical dual FW-pair DMZ, with dual-homed servers on different Pvlans.Now, when I want to send traffic to the inside FW (a 6509-FWSM), we use two 4948's with static routes pointing to the FWSM virtual DMZ interface. The 4948 have L3...

We have a 5520 and just added a failover unit. I just upgraded the IPS to 5.1(5)-E1 on the primary, so when it reloaded, it failed-over to the secondary. Now I can't make the primary active again, nor can I login to the secondary. I get the user ID a...

I haven't finished my research, but this signature seems to trigger on the TXT queries used by SPF(http://www.openspf.org/). Anybody else run into this and were you able to resolve?

Dear sirs,i have cisco pix 515E with three interfaces Fastethernet0, Fastethernet1 and built-in in the pix and Fastethernet2 which is module.i upgrade it to ver. 7.0when i connect the firewall the fe0 and Fe1 is bring up and the light is ok but i can...

I have a site to site VPN tunnel established between a PIX 506E and an ASA5520. I am able to ping across the VPN to the DNS server and I am able to ping from the DNS server to the remote computer I am using for testing.This is going to be implemented...

I have a customer who is adding a second internet T1. The ISP delivers the Internet as ethernet via their CSU/DSU. It seems the ASA cannot load balance two outside interfaces so I seem to have to add a router between the ASA and both ISP connections....

Hi,I got 2 6509 with one FWSM in each one. My default licence allow me only 2 context-fw. I would like to buy the licence "FR-SVC-FWM-VC-T2" which is for 50 context-fw. I'm using the firewalls in Active/Standby. Do I need to buy 2 of this licences or...

Hi,I have a problem on connecting to the server from one pc client end. The access list and static already been applied. The capture log shows below:17:28:17.846101 129.1.16.121.4280 > 10.30.6.142.81: S 1745184384:1745184384(0) win 65535 <mss 1460,no...

hello i m facing problem in configuring route for the second outside interface in ASA.i have 2 live ips both from separate ISPs and i have cofigured them on 2 otside interfaces now instead of using a default route i want to configure two seperate sta...

Hi, I just took over an ASA5510 firewall, and my boss want to see the report of all the internet activity of certain person (what website that he went? How long had he been online?). So is there a report that I can run from within ASA5510 that can sh...

hello!Could it be possible to configure two outside interfaces using 2 live IPs from each ISP and then apply redundency on them.Means if one link down frm ist ISP then second link (frm 2nd ISP)automatically up.What will be the static route scenario i...

Can i use a range of IP on outside interface of pix firewall, and inside host to use one of them randomly? to use PAT on this range? thank you