Network Security

Hello all, I just created a new interface on my firewall for Guest traffic but, I cant seem to PAT using the outside interface. Our firewall is a Cisco ASA 5512 running version 9.1. I'm stringing with the new NAT's. We have an outside, DMZ, inside, a...

Dear all,our router, switch, we have privilege level 15 so once we ssh in, we don't need to type any enable PW.But the config, we have password 7 xxxxxx and login local.what I understand is login local - it will force to use local account. My questio...

                                 Hi Everyone out there!                                                 Can anyone please help me to find out on How do i tell, what are the WebPages my local LAN Users are Accessing the most?                          ...

Hi All,I am in the process of coming up with a security design based on ASA clusters with sourcefire in HQ and ASA with sourcefire in remote sites. Attached is my draft diagram.I understand that there are ports difference on 5585X and the 5555x/5515x...

Hi Experts,Please help me on this, I have upgraded my cisco asa from 8.2 to 9.1 version. I know that cisco made huge changes in NAT configuration. The firewall 8.2 is configured with lots  static PAT and dynamic PAT lines. Now I am going to convert t...

hi all,currently, we're doing web filtering (on layer 3) via open dns cloud service.i know we can do regex and use a CX module.is there any other ways (or option) to do web filtering/DPI on the application layer with a NGN 5500-X firewall?http://www....

Hi all,Im encauntering a problem on adding URL domain to block . Below is my configclass-map match-any URL_LIST  match protocol http host *youtube.com  match protocol http host *facebook.com  ********  total 24 "match protocol http" command here  ***...

hi,I am having trouble receiving flows from ASA. There is no flow information on the netflow collector (Scrutinizer) and the only information it shows about ASA is its availability. I am using below config: access-list global_NF extended permit ip an...

I'm prepping to put a 5545-X in to replace a 5505. The 5505 was running pre-8.3, and our new one is running 9.1. I have been trying to do the most basic thing I thought possible (statically NAT'ing an internal server) and have had zero success. Can s...

I need to be able to ping a DMZ host from an INSIDE host and visa versa. I have tried configuring a static nat as follows static (INSIDE,DMZ) 192.168.10.0 192.168.10.0 netmask 255.255.255.0 I created an access-list called EXEMPT which permits any...