Network Security

When I go into the ASDM on my 5510 and uncheck the "Force maximum segment size for TCP proxy connections to be 1380" will that let the firewall accept packets larger than 1380? I am trying to limit fragmenting of some packets that are close to this s...

We are trying to plan a site-site vpn connecting our corporate network to a vendor's network. Both firewalls are Cisco ASA 5510s. The problem is, their private network ID matches a network ID that exists on our private WAN, which is 192.168.100.0/24....

we have pix and it has "tunnel-group 1.1.1.1 type ipsec-l2l" config statement.we are changing 1.1.1.1 to different IP and need to remove/modify "tunnel-group" command. How do we do it? I am having trouble removing it.Thanks,

Hi all,Last week I purchased a brand new ASA 5510 with AIP-SSM (ASA5510-AIP10-K9). It came in with ASA version 7.2(2) and IPS version 5.1(1)S205.0.I cannot monitor the IPS from within ASDM because IPS 6.0.1 or higher is required. My questions:1. Why ...

can someone help me with active/active failover config on asa 5520

I'd just like to share with the group something that I learned the hard way. It's ebarassing, but I'd like to keep anyone from getting as frustrated as I was.About 24 hours straight of battling a pair of 5510's and a 5505 and they will now finally pa...

Hello all,I ask me about something:PC1----Inside-PIX-Outside----PC2I have a global on inside and nat on outside.I use static (out,in) @ipPC1 @ipPC1 because the computer on ouside need to connect on internal IP of the PC1. My question is, when pc2 sen...

I am having an issue with trying to get a ping through a PIX515 with OS6.2(4). The message I keep getting, and I am unsure as to why, is as follows:106011: Deny inbound (No xlate) icmp src ACCNT:ACCA2-BK_Fas00 dst ACCNT:ACCAS1_Tunnel3 (type 8, code 0...

Hello:Gotta start by saying, I'm new at this, so please indulge me.The following is the current version of MY ASA/IPS software:Platform: ASA-SSM-20 Build Version: 5.1(1)S205.0Signature Update S205.0 2005-11-30Os Version: 2.4.26-IDS-smp-bigphysMy ques...

Hi,I am using an ASA-5510 with AIP-SSM, running 5.1 E1.I am getting a lot of false positives from one internal relating to a TCP SYN Sweep.I would like these not to be logged for this single host, but don't wish to globally disable or retire the sign...

HI ALLI want to do 642-532 IPS paper, i have all the learning material, but i donot have any IPS device to practice. Can anybody help me out that how can i prepare for that exam. Please recomend me the material and simulation kind s/w to succeed in t...

Just need little advise how to get a comfort level with CISCO PIX Firewalls.I have recently purchased PIX 501.Thanks

|May 31 2007 18:59:20|106001: Inbound TCP connection denied from 10.0.0.0/1891 to 192.168.0.0/23 flags SYN on interface OutsideI am receiving this error for both tcp and icmp traffics. I can ping from 10.0.0.0 network to the outside interface, but I ...