Network Security

I have a client who does not want to stop users from installing applications but wants to protect against trojan/worms/rootkit etc.It would seem these two competing philosophies would not be easily inmplemented within CSA.Is there a base rule module ...

We tried turning on the VA capabilities of MARS and it appears that they were crashing a number of services on a number of servers.Where can I get a log of what was scanned, what type of scan was performed, and when it was performed?Also how can I se...

Hello, I've got a PIX 525 and I need to deliver anti-spyware, file blocking, anti-spam, anti-phishing, URL blocking and filtering, and content filtering, thereofore I'd like to know if is possible to install the ASA SCS/CSS module on the PIX or it's ...

New to the ASA series. I am installing a 5505 later today. Company has two buildings connected via fiber. ASA will go behind the router and into a switch connecting the two. Main goal is to protect an iSeries webserver on their internal network. ...

Hi,We have 2 FWSMs [versions: FWSM1: 2.3(4) & FWSM2: 2.3(3)] in C6509 chassis [with IOS version 12.2(18)SXF4]We have 10Gbps link towards ISP and we would like to use full bandwidth with the 2 FWSMs.FWSM1 is the main firewall have one inside and one I...

Hi,I have 2 PIX firewall in failover mode.When I issue Show failover command ,I getting the following message,ROKO# sh failoverFailover OnCable status: Other side powered offReconnect timeout 0:00:00Poll frequency 15 secondsLast Failover at: 16:43:57...

HiHow i can forward public_IP:81 traffic to inside 192.168.0.1:81 network. please advise and help me

HiI need your help to configure PIX for port forwarding. public_IP:81 port should be forwarded to 192.168.0.1:81 inside network. please help me out.RegardsIsrar

I wanted to post here to make sure that I am getting this right. I have a Pix 501 right now and want to replace it with a ASA5510 that includes the anti-X option. If I am reading this right I am wanting this model: ASA5510-CSC10-K9. It includes 50...

I am at a Customer Site. We need to have our PIX 515 ship some traffic that will originate from connected VPN clients to some inside networks.The networks that we need to reach are:10.224.164.0.2410.224.165.0/24.This is the configured routes on the...

When configuring a PIX 515e with latest software for active/active functionality, do I need to have my interface on the second context setup on a different VLAN(subnet)...or can I just use the same VLAN and use a unique IP?thanks

Hi everyone,I'm having an odd problem with setting up CIFS in the ASA WebVPN. It works fine with a windows share but not with a samba share. Attached are debug logs from the asa on multiple fronts: debug aaa authentication enabled at level 1debug ntd...

Hi In the PIX525 ver 7.01, show service-policy: "Inspect: http, packet 2219985030, drop 0, reset-drop 0", is packet for inbound only or for both inbound and outbound? Is it for all http traffic in the outside interface? Thanksben

Is it possible to have ip Inspect, IPS(with SSM) and QOS on the same global Policy and have them all work at the same time? It seems from what I have read I can have multiple matches to the global policy, however the ADSM doesn't seem to be able to s...