Network Security

I’m trying to implement a whitelist with DNs Inspect in Service Policy Rules. I can do a Blacklist with the sites the users cannot access. But when I try to invert the logic and implement a Whitelist I end up with everything blocked.I create a DNS in...

Hello, I was wondering how http data travels through the firewall enabling Internet browsingwhen port 80 is not open? 

Hi, I'm using Cisco 7206VXR with c7200p-adventerprisek9-mz.152-4.S7.bin IOS image,now i'm trying to configure object-group, in order to minimize my ACL, but i can't use this command else then object-group security?! RTR1(config)#object-group ?  secur...

Hi,Please can some one confirm if the following is posible in ASA 5500 series, Question,Can you configure redundent interface to use as inside interface but in multicontext routed mode. I know you can do it in transparent mode becuse you don't need t...

Hello, I was wondering what the IOS inspect statement does. Does it search for viruses or other intrusionsin packets then drop them, or is just for filtering for statefull data?

hi there. Have been conducting ASA upgrades (8.2 > 9.1) and at the same time doing a tremendous amount of cleanup, e.g. the usual untidy mess of stale objects, obscure undocumented rules, and messy NAT configurationsThere seems to be a school of thou...

Hi Im trying to upgrade a cisco ASA cluster using CSM .Is there a way to do this without any network disruption?I understand from the clustering documents that upgrading a cluster requires me to first upgrade the slave,disable clustering on the maste...

Hi all,I am struggling with an event log analyzer software (Manage Engine Event Log Analyzer) in order to produce meaningful custom reports and avoiding collecting too much data  from a couple of ASA 5500 which wouldn't be processed due to the softwa...

Hi All, Please kindly advise on the below.We have an ASA in production. We are trying to upgrade it. The issue is, we are not able to upload files remotely to ASA. We have both ftp and tftp inspection enabled.Below is the scenario         Inside----A...

Guys,My ASA firewall generates a lot of syslogs about code: 733100, which means that packets dropped by thread scanning..some of my logs as below:May 14 00:00:20 myASA %ASA-4-733100: [ Scanning] drop rate-1 exceeded. Current burst rate is 20 per seco...

Seeking wisdom for a solution on something that should be relatively easy, but is proving elusive.  My home network is setup like this...multiple internal Vlans (all sec-level 100) --->ASA 5505--->Edge Router--->ISP.  The ASA is doing PAT for all int...