Network Security

hi all,i am configuring cut-thru proxy on asa.the config guide says that the authorization acl should be a subset of the acl used for authentication.in my scenario i am using telnet to auhenticate the user and i want to authorize traffic from 2.1.1.2...

hi all,i need some help in configuring downloadable acls on asa.i have configured a downloadable acl on the asa as follows - permit tcp host 2.1.1.2 host 1.1.1.2 eq 80. i get authenticated successfully , but i get an error saying acl authorizaion den...

Does anyone know of a way that i can turn on Secure desktop for on group policy and not turn it on for another one? Meaning if i login as one group policy SD wont run, if i login as another it will download an run

Hi all, I am currently testing some ASA's in a lab but need to test HA w/ Active-standby & Active-active configs. Do I absolutely need 2 of the SAME model ASA's or can I still test HA w/ let's say 1 5510 & 1 5520?Thanks,-ZO

is the following ok? I am unsure if I can nat my 47.15 address to 3.21 with the interface alreading having a NAT that appears to be for all traffic going over the interface. Any guidence on this would be great.global (outside_datae) 1 192.168.1.25glo...

We have 2 FWSM's in 2 6509 chassis and are able to upgrade the FWSM and Maintenance partition. However, we are having problems reverting our code back to 1.1.3. Any Ideas as to why?

Hi,I know the default MTU for a ethernet is 1500. But what's the default MTU size on a windows OS, xp/2000/2003 ?? and how to check this value? Thanks

Whenever I apply change in HTTP scanning (url blocking, file blocking), the CSC module will reboot by itself. Is it normal? Below is the log i see when it happens.1|Jul 20 2007 09:23:00|505013: ASA-SSM-CSC-10 Module in slot 1, application reloading "...

Does anyone know how to change the location of logging files of CSA and/or disabling local logging.

Hi,I was wondering if there is anything I need to do to a router which is infront of my PIX515E.The setup I have is a PIX515E with a 3660 Router infront of this before the internet. On this router is the public IP addresses which are then nat'ed to i...

How to check the packet drops on pix?

Hi,I am very new to PIX and need some help with setting up rules for a new network.I have three interfaces (inside 100 - 172.16.10.0, outside 0 - 192.168.10.0 and Demo 10 - 172.16.11.0). On the Demo network I have three devices with ip addresses as 1...

There seems to be some ambiguity on PIX upgrade requirements, i.e The 7.2(2) Release notes stateVersion 7.2(2) requires the following: 1. The minimum software version required before performing an upgrade to PIX Version 7.1 is PIX Version 7.0. If you...

Hello,i have installed an CSM 3.1 (build 482)on a Windows 2003 Server.When I read out the Configuration from my ASA5520 (7.2.(19)it still works fine, but the Configuration from my VPN-Tunnels to my Locations will not be read out.Any Idea for my Probl...