Network Security

Hello,Is there any news as to when the bug with the TCP Hijack signatures will be fixed? According to forum posts from March, the bug CSCsd00877 in TCP Hijack signatures (3250,3251)is being addressed by Cisco.I'm having the exact same problem (excep...

Hi,I want to fix a connection timeout for a concrete rule. I know that I can modify the timeouts for all the connections (in the section Properties/Timeouts), but I don?t know if I can modify only for one connection.Thank you very muchBest RegardsNur...

Hi, I am having a problem with the inside interface of my failover pix. It is showing up/up on the pix and on the switch it is connected to. If I do a show arp, I can see the mac and ip ok. When i try to ping the ip from the switch however it does...

Hi,I have a pix 515 E vers. 6.3(3). How can I back up thr current image to a tftp server?Tanks in advance

Hi does anyone know of any thing that might cause a problem with traffic going from one interface to another and have a big spped difference. I have a Pix 515E UR running 7.0.4 software i am seeing this problem between my inside and outside interface...

Hi all,I have setup a lab with a OOB VGW setup. I have setup an authentication VLAN on the untrust interface of my CAS on vlan 120 which is mapped to internal production vlan 20 when assesment is done. So far everything works fine except the defaul...

Hay there,I setup a ASA FW with Trend Micro Content Security. When I add an URL to the block list I can still open it from the PCs which use the ASA as the gateway?! What did I forget?Lars

We use 3750 edge-switches connected to a 3750 to route the vlans. When we are directly connected to an edge-switch, Network Assistant runs very slow. If we use Network Assistant from a pc located on a different subnet the response is much faster. So ...

HiI want to know if it's possible to restrict snmp access to some OID.ex.: I've already an ACL to restrict who can access my device by snmp RO or RW. But for those that can access by my ACL I want to give access to some specific OID only ?Is it poss...

I have a PIX running V7.11 which has been up for 17 days with a failover partner. When I try to do a show run, I get this error:ERROR: Command Ignored, Configuration in progress...This makes it seem like it is sync'ing with the other PIX? Only it h...

I cannot seem to be able to get streaming audio/video to pass through the ASA 5510 7.1(2) IOS. Whenever I try to go to a site that streams aud/vid, the player, either Windows or Real will connect to the site, buffer, and then quit. Anyone else havi...

Hi!I've got PIX 501 (PixOS 6.3.5) acting as PPPoE client. Outside interface gets IP and DNS addresses from access concentrator.There is an example in config guide how to set DNS address (got from concentrator) for DHCH daemon in PIX, so clients in LA...

Hi,I'm configuring an ASA5540 (software version 7.2(1)) to allow SIP phones to communicate with a remote SIP server.The phone is protected on the inside interface (vlan71. security90). The SIP server is on the outside interface (security0).My config ...

I have couple of users running sslvpn connection, but I got debug error from a laptop (below)when it trying establish sslvpn connection, %ASA-3-722010: Group <sslvpn> User <user1> IP <10.1.1.1> SVC Message: 17/ERROR: Unableto start VA, setup shared q...

We just configured a brand new router. The IDS portion of the router keeps firing on "Impossible ip packet" The source and destination addresses of the alert are the routers external ip address. Any ideas what might be causing this?