Network Security

I have configured our ASA with interface tracking for multiple ISPs. The failover works fine, but no host on the inside can access the Internet once the failover to ISP B happens due to NAT issues. Our primary ISP which I will call ISP A has a class ...

hello,what are the requirements of upgrading from 6.x to 7.x on a pix 515 e.is there any guidelines to follow? am afraid i might lost my activation key thigs like that..thats why i want to know the precautions too..thanks a lot..

Can anybody give me further information about cascading contexts other than what's on the documentation CD which is very little? Isn't a cascading context nothing but a shared interface? You're basically sharing context A's outside interface and cont...

I have 2 6500/FWSM in multiple mode with 3 security context. I am sharing VLAN 800 as the outside of all 3 context. Context 1 and 2 are in failover group 1. However, I am not able to add the 3rd context to failover group 2. I received the following e...

Hello, I have an issue with a newly configured ASA firewall (running v7).From a client machine (using the ASA as the default gateway) I can download files from sites that use FTP but not from sites that use http. However, if I use Firefox (rather tha...

Hi,I am unable to change default username "pix" for my ssh access on pix firwall 515E running 7.1(2)I can not see this username configured any where even in running config.any sugesstion ?

Hi,DO you have any comparison report between PIX and ASA? Pls reply or send it to me bikash_bd@yahoo.com

Hello,I am running a PIX 525 firewall, with PIX software version 7.2.1. I am using the default global service-policy, and RADIUS packets are being dropped with a log message stating that the label length is exceeding 63 bytes. The log message (clip...

Hi there,We're trying to implement isdm2 as inline mode integrated with fwsm module. We have two vlans on the switch: vlan 30 is responsible to take care the outside interface of the lab context of fwsm while vlan 40 is responsible from the inside in...

I need to let a vendor have access to a network device that they installed. I added the following two lines into my PIX 515.access-list acl_out permit tcp host vendor.ip.address host my.outside.ip.address eq sshstatic (inside,outside) tcp my.outside...

I am trying to delete a Static NAT that I have created in error, but when I click 'delete' from the 'configuration>NAT>Translation Rules' tab, I get the following error:The operation you are trying to perform will result in some security rules being ...

Is netflow supported on the ASA? I have been look on teh net with no luck can soemone point the way or tell me if this not possible?TIA!!

Hi all,Okay I'm trying to add some access-list entries with the Baseline template Job under the Archive Management of the RME (LMS2.6)the issue is I have an access-list thereaccess-list 100 permit ip host X.X.X.X anyaccess-list 100 deny ip any any ...