Network Security

I currently have 1 ISP (Verizon) coming in over bonded T1s.  This ISP has NAT pointing to my critical servers that have clients coming in to connect to them via port 8421 and 3024.  We are looking to bring in another ISP.  I know that my 5520 can do ...

I've got an ASA 5525-X with the SourceFire module that will be replacing a 5510. I've got the firewall ACLs from my existing ASA transferred to the new 5525-X and now I'm working on the initial configuration of the Sourcefire module. I've watched a d...

Hi All,I have a customer using an ASA 5550 and recently considering migrating to a FortiGate 620BThe main reason is because it can run as a Firewall, web filtering, anti-spam, anti-virus, IPS and has 20 accelerated ports to avoid any degradation in p...

Hello,           Can any 1 help to me cisco csc-ssm active directory integration with step by step guide. thanks

Hi,I have a new ASA 5515-x.Have a PC connected to the management port. I have network access to it, can tftp up files and ping the firewall.When I try to access it by https://192.168.1.1 or https://192.168.1.1 I get "webpage could not be found".PC co...

Wasn't sure if this should be posted in the "Security" section or "Network Infrastructure" section. Anyway here we go: We currently use Cisco Security Manager (CSM) to manage 36 pairs of ASA's and ASA-X's in field offices around our province. We have...

Hello All, Is there a newer version of the Sourcefire eStreamer for Splunk 6.x ?We have defense centers running 5.3.x and would like to colleect events into Splunk. Also, is there any way we can have a single instance of the eStreamer client collect ...

Hello, I'cve added a QoS policy to our ASA to stop our Guest network using all our bandwidth, it is work with uploads but not downloads, can the ASA only implement this QoS when the traffic is not being used in that direction?      policy-map GUEST-N...

Hi ,As I am new to Cisco , request to suggest the most matching command to trouble shoot the Cisco ASA and  FWSM  in the command line interface. Pls  find the below questions. How can I check the traffic   hit   for a particular ip   address   in com...

Hello,I need your advice and your help.My company  wants to set up a mechanism to detect PCs connected on catch and which are not allowed.the goal is to identify these ports and shutedown their ports of the switchDo you have an idea about the configu...

I am looking for best practices for my DMZ zone on my ASA 5510 to my inside network. I have this currently setup, but would like to know if what I'm doing is best practice. I currently have a proxy server in the DMZ and I am using Nat from my one ins...

I am new to IPS and having issues connecting to the IPS10? ***LICENSE NOTICE***There is no license key installed on the SSM-IPS10.The system will continue to operate with the currently installedsignature set.  A valid license must be obtained in orde...

Hello All,I'm in the process of learning how to configure Cisco ASA. I've got the ASA simulated on GNS3.Can some tell me where I can find books or material that has actual labs included in the book.The books I have found seem to be handbook type of m...