Network Security

The issue we are experiencing is that after a period of approximately a week, sometimes two, the ASA will stop accepting VPN client connections until we clear down the translations (clear xlate). Once we have done this, the ASA will start accepting c...

I have configured Active/Standby ASA 5540 failover. I cannot make the primary to be active for long it fails over to secondary after sometime. I tried reloading seconday(active) it fails over to primary but after sometime it again failover back to se...

Here is my scenario:I currently have a PIX 515E at one location. We will be migrating to a two or three location redundant configuration with separate ISP connections from separate providers. These sites are connected by dark fiber internally. I w...

Hi,When I do show version on my IPS it shows that the license will expire after 2 years although I have purchased IPS services for 1 year only! Does this mean that the license itself will remain valid for 2 years, however I will after 1 year no longe...

What is the best and quickest way to find out what host has the largest number of connections to the PIX or is hitting the PIX the most with the most traffic? THanks to all!

Hi All, i planning to configure pix-515 firewall for my internet connectivity . can anybody suggest me the configuration. only http and exchnage traffi will pass on this link. following is the designe for my internet connectivity campus network w...

Hi,I am facing an issue with a new 6500 router (IOS version 12.2 ) having a FWSM module. (FWSM Version 2.3(3)) which is like this:-I have three Vlans INSIDE, OUTSIDE and DMZ with security levels 100, 0 and 50 respectively.I have created appropriate a...

Hi how can i tell what throughput my firewalls are doing at the moment. I am also getting overruns and error, and we believe its beacuse the pix can't handle the trhoughput..... does anyone know were i can find this information

Hi Firewall Gurus,I'm just a bit confused with the NAT and PAT capabilities of a PIX firewall. For example I have this configuration:global (outside) 2 210.*.*.49-210.14.26.55 netmask 255.255.255.0global (outside) 2 202.*.*.34nat (inside) 2 10.161.0...

I would be grateful if anyone can enlighten me with regards to what I am doing wrong in setting up my asas5510. I?m unable to ping out to the Internet from my DMZ or from the inside out to the internet. I can ping devices on the inside and I can ping...

I'm about to suggest a NAC solution for our network but I want to know first what are the real life impacts of NAC (clean acces or framework). Does users have to authenticate 2 times (nac + ldap) ? Any network performance impact ? I need all kind of...

I'm in the process of first time configuration of ASA 5510 using ASA 7.2(2) and ASDM 5.2(2). The Command Line Reference manual (7.2(2)) indicates NAT and PAT are features not supported with WEBVPN.Does that mean that the appliance must allocate routa...