Engage with peers and experts on network security topics such as Secure Firewall Threat Defense, Adaptive Security Appliance, Secure Firewall Management Center, and Security Cloud Control.
HiI have an PIX 515e with ver6.3(3). I wan t to upgrade to latest version 7.0(3). Is that i need to buy a separate licence or Please hep me how can i achieve this.
I have a PIX 515E set up with statefull failover.Do I have to have a DMZ bundle in order to configure a DMZ for an FTP server?Is all that is needed is to set up an interface on one of the 3 remaining available and configure the security for it?
Do you guys know of any reason why I would be getting ip address conflicts when trying to set up the following scenario:outside-x.x.x.34/30inside1-x.x.x.37/29inside2-x.x.x.45/29It would appear as if the firewall is not handling VLSM very well.any th...
I currently use wccp on my internal router to send http traffic to my proxy server before it gets to the firewall. I have just installed an ASA to replace existing firewall for VPN functionality. My security policy dictates that all user internet tra...
Hi Guys,I believe in PIX series, in a Failover Pair using (UR-FO) license combination, if PIX with UR license fails - The PIX with FO license takes over, But now if this PIX with FO license reboots (for amy reason) then it is treated as a Standalone ...
I am a self-taught yet reasonably experienced administrator of the software client-to-3005 concentrator VPN scenario. Some of the concepts, though, have me stuck when trying to apply things in the 3002-to-5510 environment: I have successfully configu...
Hello:I have a LDAP server configured and authentication working just fine. My next goal is to provide SSL VPN services to some employees. Their Tunnel Group membership should depend upon their LDAP 'group' membership.For example, our LDAP administra...
I just set up a seed file with 1 device included (as a test) for MARS - the device is a Cisco router - seems pretty simple - the seed file only has the device name, type (IOS) and IP address fields included - all other fields are empty. I'm trying t...
I'm trying to determine if the logs I'm getting in CSA are an accurate report of a rootkit, or could they be false positive?CSA reports two of my hosts both XP Pro are in Untrusted Rootkit mode. error messages look similar, but using 3rd party tools ...
I have two ASA 5520 appliances running 7.0(4). I use the Management0/0 interface as a connection to the Internet as it is only 100mbps.That leaves me four Gigabit interfaces to use with DMZ architecture.I tried to configure active/standby failover u...
