Network Security

Hello, I would like to accomplish following task :  I have some DMZ zone on ASA. It has access only to internet, not to inside network. This is network used for visitors.I would like to perform nat from inside subnet to DMZ and then from DMZ to outsi...

Hi AllOne of the companys I work for has 950 rules on the firewall, would you consider this excessive ?The rules are a mix of application, and then rule allowed by siteHow best is it to manage a rulebase, should be manage it by application, and then ...

So I recently acquired an ASA 5512-x to replace my old ASA 5505 to allow for more VPN connections. I was able to transfer most of the configurations from my ASA 5505 rather easily, but some of the commands didn't translate properly and I need some he...

Hello, does anyone have the Release Notes of ASA 9.1.5 Interim Release 12 (asa915-12-smp-k8.bin)?The release notes available for download state differences for 9.1.5-10. Best regards,Frank

I need to configure a firewall to allow several subnets/vlans through it. I'm having trouble figuring out a way for all of the subnets on one side to go through the ASA. Here is the situation RouterA P2P-> RouterB -> ASA -> L2Switch L2Switch has VLAN...

Hi to all,somebody knows if the Cisco ASA version 8.0.5 is compatible with the Cisco Anyconnect Essentials license??? We are trying to get this functionality, we purchase the Anyconnect essentials license and 50 users license, but we only can see 2 W...

I have an ASA 5510 with 2 "outside" interfaces connected.(all addresses are fake to protect the innocent.)one with verizon: 63.1.1.2 / 28 (Main internet connection, VPN Tunnels attached)  interface is named "fiber"and one with comcast: 50.1.1.5 / 28 ...

   I have two firewall ASA 5540 .Each Firewall contain one security module.IPS and CBS. Firewall support active active cluster.can i use both modules at a time   

Hello,I have a production environment working with 2 Cisco 6500 series configured as VSS. We have One supervisor and multiple SVI interfaces on MSFC card.  Each of the two 6500 has one FWSM module mount but not configured. I have 45 SVI interfaces (V...

I received a new modem today to upgrade my speeds with my ISP. The modem is a Hitron CGNDM. Once I had this new modem plugged in I had the ISP put the modem in bridge-mode disabling the NATing/any fancy functionality and performed a speed test. I was...

On my ASA 5520 with version 9.1(2)8 I am getting a warning about tcp timestamps when running the external security scan. " It was detected that the host implements RFC1323"Solution = Disable TCP timestamps Please correct me if I am wrong, from what I...

HiWe have a Cisco ASA 5520 that we've just connected up to a 100 Meg internet connection. Speedtests can only get to 10 Meg, but if I bypass the ASA I can confirm I get up to 99 Meg up and down.The service was previously connected to a 15 Meg interne...

I enabled IPS on a 2901 router. The signatures are uploaded and it is enabled on an interface. When I goto signatures I get a message box that says "You must first enable IPS before configuring signatures. To enable IPS, go to IPS Policies and enable...