Network Security

Dear Friends, I have ASA 5510 firewall. the hardware support will end in 2018 and the last supported IOS version is 9.1 as per the below link.  http://www.cisco.com/c/en/us/products/collateral/security/asa-5500-series-next-generation-firewalls/eol_C...

I've just started consolidation of a 5512x with one ISP and a 5550 with another ISP. The configuration is dumped on a 5555X with FW 9.2(3)4, which then will have 2 ISPs. To make the migration day easy I want to use both ISPs for VPN/IPSec and interne...

Coming from a linux firewall environment, I find it very difficult to setup the ASA5585-X with the limitation of 1 IP per interface. What are the options that we have to handle 5 ip aliases per interface on the ASA? With linux you can do "ifconfig ...

Hello Everyone I am trying to lock down our DMZ a little better while allowing DMZ hosts to have internet access.   My goal is to allow hosts to access internet using our core outbound service group which is a small collection of protocols.  I want ...

I have recently migrated my home network from RV320 to ASA 5505 software 9.2 (4).  Everything works great other that one problem.  I cannot seem to access the web server from my internal network using the public ip or host name. Users from outside c...

Hello all,I'm having trouble setting up a second vlan to route to the internet. I have a Cisco ASA 5505 connected to my ISP(OUTSIDE) and a Cisco 881w (INSIDE) router in the back of my firewall. My vlan 10 with the network 192.168.5.1 255.255.255.0 wo...

I'm looking for a good list of debugs to enable for both ASAs and IOS (ZBF) firewalls for logging to a syslog. We are trying to setup some basic log archiving for clients to be able to have something if a security event were to happen. Thanks!

Hi Team, I've tried to access our primary IPS but I got the error message connection refuse..Can anyone help me to resolve this issue?

Hi Guys, I am planning to attempt the CCIE Security Written the end of the December month, so any guide lines is there to clear the exam and resources which will help to it.

Hi, Here's the situation:  There is an ISP managed Fortinet firewall that this company uses..It currently is NAT'ing an internal Ip address (mail server) to a public ip address so that users can access their webmail over http from the outside.  Pret...

Hello, We have a site-to-site VPN tunnel setup and functioning properly from our office to the datacenter. However, the datacenter machines are also able to establish connections such RDP and UNC paths to our office desktops.  I want to restrict the...

Hi, As per PCI Clause. Your process document detailing how to update your system configuration standards as new vulnerability issues are identified. What should be process for networking Gear? do i need to keep upgrading my each and every network gea...