Network Security

Hi,I have a ASA 5500 running 9.X image. My Squid proxy is in same network. I would like to redirect my all web traffic (http and https) to Squid box. No idea how do I proceed with best practice ? please help. Thank you.ASA inside and Squid running in...

I am struggling here and not sure what I need to do but think it should be fairly straight forward.  I grew up on old IOS and IGS/MGS/CGS routers but have been out of the industry for quite some time so a lot of the new commands are foreign to me.  S...

I have access to an ASA 5505 over a VPN, it is connected to a switch, the port on the switch that is connected to the ASA is an access port, I made it into a trunk and got kicked off as expected, so on the firewall I made the port that connects to th...

Looking for confirmation!! From the Cisco document: CLI Book 1: Cisco ASA Series General Operations CLI Configuration Guide, 9.1found at URL: http://www.cisco.com/c/en/us/td/docs/security/asa/asa91/configuration/general/asa_91_general_config/intro_sw...

Hi Experts, This time for your advice on below point..1) Recently we were having a vulnerability assessment testing(through a tool) on  network and observation are :-"SSH Weak MAC Algorithms Enabled,SSH is configured to allow MD5 and 96-bit MAC algor...

Hello All, I need to allow traffic thru my ASA for expressway. Per the guide they want a range of TCP and UDP ports open into my DMZ from inside and outside. I thought I wrote this out correctly but, when I check it via packet tracer is says that my ...

Dear all, am having cisco ASA 5515-X IPS  with internal IPS.I did the initial config for ASA and session IPS too configuration (same network), but i can`t ping from the ASA to the embedded IPS. Do route needed or not?I need a resource for initial con...

Hi,Im connecting to my firewall through the console port, and need to know how to reset it to factory defaults. I have looked around online and can not see any reference on how to do this.Any help would be much appreciated thanks.

Hi It has been a couple of years since I last had my hands on the ASA firewall - but a question popped up the other day, which I could not answer.. Is it possible to do policy based destination PAT from the outside to inside interfaces - based on sou...

Hi , I have some services running behind  fwsm . sometimes i am not able to connect to the services behind fwsm .for example services running port 8888,i have permitted icmp .but i cant ping the interface ip. (192.168.111.1) .server behind fwsm are i...

I want to access Web Server from inside. My Web server is located in DMZ (IP:192.168.4.11). So how to NAT and create ACLs??? P/s: my English is not good!!! :D   

Below is my configuration setting a tcp half closed sessions applied to the outside interface. ACLaccess-list tcp_timeout extended permit tcp any host static_mapped_outside_IP eq 443  Class Map  class-map tcp_timeout_cmapmatch access-list tcp_timeout...

I recently acquired a 5506-X and I have to say that the out of the box experience with FirePOWER and with Cisco's website is pretty bad.Once the 5506-X has completed the initial configuration wizard, and the user has jumped through the hoops of insta...