Engage with peers and experts on network security topics such as Secure Firewall Threat Defense, Adaptive Security Appliance, Secure Firewall Management Center, and Security Cloud Control.
The ASA SSM-10 and SSM-20 IPS modules for the ASA-5500 series products can only be managed via CSM (there is no support via VMS). I have been trying to figure out how to add the IPS functionality of the SSM-20 module to the CSM server so I can manage...
I have installed some PIX 501 with 6.3software Cisco Secure.I need to permit traffic to application layer https.Does somebody advice me about configuration command or documentsabout ?best regardsLorenzo
I am trying to configure H323 inspection on an ASA5520 version 7.2(1). The calls connect, but the embedded IP is not being changed, so there is no inbound audio/video. If I configure the video endpoint to embed the public address (behind FW setting, ...
I know this is unsupported, but I was wondering if anyone has tried loading the CAS/CAM ISO on a VMware virtual machine? I am considering doing this for testing/lab/learning for a smooth implementation in the field.If you have, did it work? Any gotch...
Hi,I would like to create a signature which fires when a server reports HTTP Not found.For testing purposes I have used space ([\x20]) for matching regexp. It does not work. When I set the direction from "from-service" to "to-service" it works. Does...
Hello,I have a following question regarding the tunnel groups on ASA.We have multiple user groups with different access level needs and a user can be part of a multiple groups.Currently ASA (or VPN 3000) allows to lock a user to only one group. I see...
Hi,I'm new to the realm of firewalls but I am wandering if the Cisco PIX 501 has any capability to send out monthly emails showing bandwidth usage?Thanx in advance.
Hi!I have a few questions about the User license on CSC-Module.1. How does the CSC-Module check the number of users using it, is it mac-adresses or what ??2. How long will the user take up a license after disconnected all sessions through the ASA.3. ...
Hello,I need apply diferent security policys for diferent user. I have two Network Access Profiles with diferent advanced filtering attribute UserName, but this configuration don?t work. I have debug radius authentication in NAC switch and i see that...
There seams to be a problem with the signature Net Flood TCP. The Cisco Intrusion Prevention sensor is installed in promiscuous mode and is at version 5.1(2) S247.0. The signature is enabled for rate 0 and to produce at alert.signatures 6920 0 status...
Hi friends,Just wanted to know a few things. The platform is confined to ASA 5540 and version 7.01.Can I not telnet into one of standby's interface Ip's? This is just to check if it has the same configuration as the active one? I just want to escape ...
