Other Security Subjects

I have a Pix configuration using Policy Nat.static (inside,outside) tcp 1.1.1.1 www 2.2.2.2 www netmask 255.255.255.255 1024 800static (inside,outside) tcp 1.1.1.1 https 2.2.2.2 https netmask 255.255.255.255 1024 800static (inside,outside) tcp 1.1.1....

Awhile back I created an Application Control rule as follows:- Take the following action: Monitor- when Current applications in any of the following selected classe: <First Time Application Execute>- But not in any of the following selected classes: ...

Hi everyone,We have a cisco 1811, E0 is the WAN, E1 is the LAN. The onboard 8 port switch is split into 2 VLANS. Only the LAN on port E1 is a 'trusted' network. The problem Im having is accessing Internet from the LAN on port E1. Now everything was w...

Hi,Once I genereate rsa keys in the 3560 switch, they are regenerated in every 60 minutes automatically. During the process the cpu utilizition goes up to 40-50%.Is there a way to change the period at which the keys are regenerated, or to disable thi...

HI!I need to know if there is a way when a user logs in a router or a switch and make a change that change must be logged in some way and all configuration changes must be seen somewhere. I know i can see in the show log that a user changed the confi...

Hello,I have a pix 525 version 6.3, and i want to know if I could apply FO-AA. I have been searching about the concept but i don`t find anything. Do you know an URL where i can find the definition,the concept, how is the functionallity.Thank you,

I have TCP and UDP ports 2967, also TCP ports 21,80,443, and TCP port 38293 allowed on both my inside and outside interfaces. When I view the debuggin log there are no errors posted from the machine that is trying to update. LiveUpdate connects, ge...

Hi,a quick question: how do you set the time on the FWSM. Can you set it to use NTP server liek the routers do? Or does the module receive the clock from the 6500 switch?I am interested in this for both 2.2 and 3.1 FWSM releases.Thank you,Remy

In cisco FWSM 3.1, you can not delete anything on the flash: partition (for example I want to delete asdm by typing "delete flash:asdm" )In cisco manual its mentioned that you can delete any file on the flash but if you check from any FWSM with 3.1 y...

We have a setup where users wish to perform SSO to AD. However clients are never redirected to the Clean Access Agent download page even though the require use of clean access agent is selected for the user role and OS type. Any suggestions would be ...

Hi,We have a failover pair of FWSM blades running the latest software version - 3.1(3). One of the key reasons for upgrading to this version was the multicast support introduced in this release train.Now, there's not a great deal to configure on the ...

The config about NAT GLOBAL AND STATIC :global (outside) 1 interfaceglobal (inside) 1 10.1.1.1nat (outside) 1 access-list acl1 outside 0 0nat (inside) 1 10.1.1.0 255.255.255.0 0 0static (inside,outside) 192.168.1.3 10.1.1.3 netmask 255.255.255.255 0...

I'm configuring two asa5510 firewalls for an active/standby config. Do I and How do I configure the MAC addresses for failover. Do I configure that Virtual MAC addresses?