Network Security

Dear all,We are using asa 5510 having Version 7.0(7).Some times its DMZ interface and Outside interface utilisation suddently rised to 100 Mbps and come down after 30 sec, That time the cpu utilisation its normal CPU utilization for 5 seconds = 5%; 1...

Hi allI was not in multicast at all till now.Now I have to configure Cisco ASA 5515 with IOS 8.6 to pass multicast traffic.There are two multicast sream. One is from inside to outside, second from outside to inside.On the outside side is router(s), b...

Hi Guys,Hope you all are doing ok, I have a question about configuring class for limit-resource on the context for virtual FW, I just want to understand how this limit-resource works, for example the command "limit-resource conns", does it mean per c...

Hi, community! Can you help me with simple task - how can I configure police-based nat to allow ICMP-only traffic on asaos 8.4.1 or 8.3?On 8.3 it was very simple:global (outside) 1 interfaceaccess-list outside_nat_outbound extended permit icmp any an...

Hi guys,The issue : I cannot reserve 443 nat'd to my interface  as below.  I get the error ' unable to reserve port'object network EDM_GMalic_RDP nat (inside,outside) static interface service tcp 443 443This makes sense since ASDM is running by defau...

Hi Guys,I'm having a potential issue with trying to configure basic firewalling on my Cisco 881 router & denying all traffic from the internet.  My config below:ip inspect name FIREWALL tcp timeout 300ip inspect name FIREWALL udp timeout 300interface...

Hi,We have added our second WAN circuit into the ASA. However, I can't ping the new gateway or the test destination from the ASA. No ARP entry on the new interface. Is this a licensing/version issue or I'm missing something?Version 7.0(8)This platfor...

We are running a 5520 ASA @ Version 8.2. What needs to be done to configure it to support FTPS?Thanks,Doug

Hi Experts i am very beginneer in ASA & firewalling, i just want to enable RDP port 60892  for accesing one server outside what i did is object service rdpservice tcp destination eq 60892 object-group service NETservice-object object rdpaccess-list I...

On the Cisco ASR's, there is an option to disable the security association Lifetime Kilobytes all together and just use the secs.http://www.cisco.com/en/US/docs/ios-xml/ios/security/a1/sec-cr-c3.html#wp2944599527My question is whether this needs to b...