Network Security

I have two ASA 5520's with SSM-10 modules configured in active/standby failover mode running 7.2(1). The IPS policy on the ASA is configured for IPS inline and permit traffic if the module fails. The ASA Criteia tab has the number of interfaces the t...

Does anyone know of a way to block Skype and any other VoIP services with an ASA? I would assume a regexp recipe is in order because I don't see any built-in policies in the ASA. However, with each additional Skype version, it seems they change how...

I have added our Pix 515 Firewall to our Cisco Security Manager console. The Pix adds without issue, however if do not see our Remote Access VPN listed under the remote access VPN tab. If I preview the configuration and compare it to my running con...

I'm having an issue with the CSC options not showing up in ASDM even though the module shows as installed and up in the command line, any ideas?Aaron

Hi all,I have some more question about HW and PIX failover.What happens when I connect two PIXs..one UR license and one FO license and my FO PIX takes activity over and my PIX with UR license will be corrupted so that I will need to disconnect it com...

isakmp is working.fase 2,Ipsec does not work:IPSEC(validate_proposal): transform proposal (prot 3, trans 3, hmac_alg 1) not supported

I have a brand new configuration. I made the fewest possible modifications for testing. Here are the only changes I made:Added an IP (+mask) to the outside and inside interface.Added a nat (inside) 0 0Added a global (outside) PUBLIC_IPAdded a defau...

Again, Pix 506 5.2(6):To this point I will need to manually enter my DENY access-list statements on my 506 as we do not currently utilize any type of IDS.In my initial config, I had 1 DENY rule, followed by 5 PERMIT rules and then of course bound to ...

Hello,I test a pix with several configurations. I'm able to configure my Pix with inside an outside (no dmz).Now I activate dmz, but I've a problem.-I'm able to access everything from inside to outside -I'm able to access everything from inside to dm...

We have a branch office in another country which has a ASA 5510 installed between their LAN and an internet router that connects to the local ISP. We're trying to create a tunnel to connect this branch office back to the Headoffice. At the headoffice...

I have a ASA 5510 with the CSC10 module and I also have a second 5510 without the CSC10 but with the Security Plus license. I know that I at least need to add the security plus license on the 5510 that has the CSC10 module but since the specs say li...