Our application-log on our 4255 running 7.0(1)E3 is showing 96% full. I don't see any GUI or CLI commands that pertain to the application-log. What is it and how to you clear it?Craig
HI,Currently we have 1st tier and 2nd tier firewalls as Cisco ASA 5540. We are planning to replace the 2nd tier firewall with ISA firewall. We have our ironport box located in outside DMZ of 2nd tier firewall. Is it advisable to do so ?? what are the...
Hello,I am trying to add a firewall ASA5505 between netopia 3347 router and my LAN. My connection is like this (LAN --- ASA5505---NETOIPA--- INTERNET). DSL is provided by AT&T. I have 5 static IP addresses. Netopia router is working in PPPoE mode a...
Hello Guys,I am a beginner in ASA IPS Concept and my company OWN a 5520 ASA .Currently ASA has been connected to ISP connected router and serving as an Firewall to controll internet traffic whichis integrated to Websense for URL filtering.Can you ple...
Hello everybody,I was going through the FWSM configuration guide and came around a concept of placing the MSFC in front or back of the FWSM. What i have understood is if you create a VLAN10 and assign this VLAN10 to the FWSM and then create the SVI f...
memory usage : 94%Firewall has 64 MB RAM.Version 8.0.3I disabled threat detetection and buffer logging, but no change. Rebooted two weeks ago and a decrease to only 88%. Now it is back up to 94%.any idea why high memory usage, or how to troubleshoot ...
Hello,Just want to clear how can I configure the NAC to direct the user to the untrusted interface of CAS automatically.Now, I am manually entering the ip of the untrusted interface to my internet explorer before I can have NAC agent to download.How ...
Hello,I have 2 ASA 5520's in active standby mode, they are on IOS 8.2(2) and have 512mb of memory. For some reason the memory usage went from 70% to 85% at 4pm yesterday. When I look back at the the changes at that time all I did was add a subnet to...
Hi,I am setting up a zone-based firewall and NAT for inbound public traffic to internal private IP addresses. I am using a 2911 router with all the security bells and whistles. Do I set the destination as the public address or the private? I found a...
i'm having all sorts of problems w/ VPN stability on the 8.2 and 8.3 IOS lines for my ASA. should i take it back down to 7.0.8? this is really pissing me off. what's up w/ all the bugs?
I've setup NAT hairpin for inside hosts to use the public IP of the inside webserver as follows:inside client:10.156.16.28webserver: 172.22.35.10 NAT's to 24.x.x.xI used these commands:same-security-traffic permit intra-interfacestatic (inside,inside...
when designing DMZ we usually put a dedicated L2 switch for connectivity between firewall interfaces and public servers...and we create vlans in this switch according to DMZ..what risk can be found if i create these L2 vlans in our collapsed distribu...
Hi Everyone,I currently login to a FWSM (remotely) on my network but I do not know what the chassis is. Also if I do find the chassis with a FWSM in it, I'm unablt to do the session command as this is not allowed via tacacs authorization.Any usefull ...
