Network Security

hi all i would like to ask something abt the license. i have got 2 asa 5510 security plus license. so both of them are supporting failover. now i just want to test the aip-ssm module of the asa. can i buy one and put it on the asa and use it. i know ...

I have forget my username and password of my IPS 4240, how can I recover my password and username?Thanks You very much

Hi all:I currently have a T1 connection coming into a 1700 cisco router and a pix 515. I wanted to get add a dsl modem for internet access only. My first plan was to add another router and add routes on that (the cisco 1700 isn't our router and I d...

Hello everyone, I have a couple of routers outside a pix firewall that need NTP service.Due to some routing and NAT "issues" I cant get to the real NTP servers.Is it possible to peer to a PIX firewall (6.3)?I would use:switch(config)#ntp peer Pix-IPI...

Two weeks ago I deployed a Pix 501 with OS 6.3(1) to one of our remote sites. It ran great until last Friday when it would suddenly stop working every 16 minutes and 20 seconds. Yesterday the firewall was exhibiting the same behavior so I upgraded...

hi guys, i got some prob in ASA plz help me out,, pc1-----------ASA----------pc2 outside inside now see nat is disabled and i have given an accesslist to allow pc1 to ping pc2. till here it is working fine. now suppose i have i...

Hi,I had an ACL for allowing DNS zone transfer and DNS queries to our DNS server that was allowing TCP/Domain and not UDP on port 53. I also must note that I didn't written that rule but inheritted it.after I added another ACL and created a pool thro...

I have setup a vpn access and it works fine. The only thing a can't is connecting to a sever in the dmz zone.What must i do to configure this. People want to acces a exchange server wich is in the dmz zone.

Hello everyone,Is there any special thing that I should enable in order to make TACACS work through a pix firewall (doing nat also).I have a few switches behind a firewall that need to be enabled with AAA authentication with TACACS.Please let me know...

We are trying to replace a pair of PIX515e's in HA mode on 6.35 with ASA5520's in Hot/Standby mode on 7.2.2. We copied the majority of commands successfully from the PIX's to the 515e's, but when did the swap out, all Dynamic NAT sessions failed to ...

Hi,Can someone help me in answering the following Question With PIX 525 version 6.2 can bandwidth distribution be done. I need sample configuration for the following Scenario BandwidthallocationInternet-Link is directly terminated on PIX 525 with In...

I currently have over 3000 lost carrier errors on pix 501 outside interface. Does this point to an issue with my dsl?

Hi,There seems to be no functionality in CSA-Windows Rule to prevent going a NIC into promiscious mode (Though there is a UNIX rule for that).How I can I prevent sniffer applications from being launched on Windows using CSA ?I don't want to create a ...

Cusotmer has an ASA 5520 running 7.2(1) with a CSC-SSM-20 module. The updates for the CSC module is set for 02:55 (note, this is am, not pm). In the syslogs, we are seeing the updates occur around this time as expected, but it also happened today in...