Network Security

Events in CSA MC for agents shows system state along with details,rule & wizard. Why does system state mean?When i follow the wizard to create an exception rule,when i click finish it gives an error "see csamclog.txt for details".I checked the log fi...

I have migrated out PIX 525 to the ASA appliance. All went well except for the following problem. I need to be able to see traffic on one of my DMZs by both the real, and the translated IP addresses. The PIX allowd this but the ASA does not. Desperat...

Hi Everybody,I configure SSH on my ASA5510 which looks like ssh 10.0.0.0 255.255.255.0 inside, version 1 and 2 & ssh timeout 5 is not working, but the same config i used in router, core switch is working fine. I do need to configure any more to work ...

Does ASA/PIX support Multicast traffif?If yes, any documentation where I can read more.Thanks

Hi all,Id like to consult my first problem relatedto failover configured on PIXs 525 with ver. 7.0.4. I constantly see this messageon secondary PIX :%PIX-3-210005: LU allocate connection failedBut when I look at free mem (CLI commandshow mem) I see t...

Hi all,Id like to consult second problemwith our failover with PIXs 525 and PIXOS 7.0.4. Both are connected with serial cable and dedicated ethernet cable.Problem is:When I disconnect one interface onPrimary-Active PIX than other one takesrole. But w...

Hi all.I'm now managing two ASA's (5520 and 5510). These have been in my mind configured poorly.The 5510 has its external interface connected to a DMZ interface of the 5520.SSL and IPSec vpns are terminated to the external interface of the 5510.Can I...

I have this scenario with a PIX 525 6.3, this has worked for months and suddenly stopped.I have a device on the inside network that needs to access a remote site network through a VPN tunnel. Inside network device is 10.11.150.1, needs to access remo...

Hi,Can we take config backup through IDM, as I regularly upgrade OS & signautures and need to take backup of our config. But in IDM I could not find any option. AS I solely want to use IDM for all purposes.Currenlty I need to do ssh,take backup and t...

I upgraded a PIX 515 from 6.3 to 7.22 and after the upgrade static NAT fails for the NAT translations using the same IP as the outside interface. I see the connection being dropped before it hits my outside access-list with PIX7-2-710002 tcp drop ip ...

I know that this was supposed to be fixed in 3.1, but I can't seem to get anyresults when running standard capture commands on any interface even though I'm sure traffic is flowing. This is a FWSM in a Cat 6500, running IOS 12.2(18)in multiple contex...

I have been trying to find a single document example of basic multi-context config examples for the case where there is need for two independent virtual firewalls to two provides (no failover or route tracking). Any CCO url's appreciated.

Anyone knows if it is possible to pass this traffic trhough ASA in transparent mode?I have tried with ethertype but it doesn't work.