Network Security

Hi There,I am creating a new ACL on an ASA.I used the following commandsaccess-list VLAN127_IN line 20 remark ***Deny Traffic to Rest of Lan***access-list VLAN127_IN line 30 extended deny ip 192.168.127.0 255.255.255.0 10.0.0.0 255.0.0.0 (hitcnt=0) 0...

I set up my switch, the port security is activated, but when i have 2 ports configured in same vlan, when changing the computers conected in those ports between them, the ports are not going in shutdown, only discard packets. How can i configure to s...

I have a Cisco ASA5505 and am trying to throttle the bandwidth for my kids consuming all the bandwidth when they watch youtube on their computers and iPads.  I know Youtube traffic originates from multiple IP sources, so does anyone know how I can th...

Hi guys, I'm having a strange behaviour in an ASA cluster running 8.4(4) regarding failover feature, from the Active node standpoint if I issue a "show failover" I have the following result------------------ show failover ------------------Failover O...

I have a client using an old 8.2 IOS version of an ASA and I need to convert some of our standard configurations to 8.2 so it will work with his device.  am unfamiliar with 8.2, so I am wondering if someone can give me the equivalent of the following...

Hi...I have some issue regarding a FWSM module inserted on Catalyst 6509. This module is the stand-by of the primary module resident on other Catalyst 6509 that is fully working. No operations has been made in the failover mode.Firts of all, I can't ...

Iam using an ASA5510 firewall in one of our plants. I'm using one WAN (Link 0) & two LANs (Link 1& Link 2).WAN: 10.127.225.8LAN 1: 172.16.0.xxxLAN 2: 192.168.75.xxxProtocol communications between LAN1 & WAN: SCP, OMPRO (Customised TCP/IP ports), Ping...

Hi!I want to tune IPS module (SSP) in ASA-5545-X for work with the signature 6920/0 (Net flood TCP), 6910/0 (Net Flood UDP) and 6901 (Net Flood ICMP ..). My settings:signatures 6901 0statusenabled trueretired falseexitexitsignatures 6902 0statusenabl...

1. Using Defense center Web portal login with Admin access2. Select Operations > System Settings, Click Add New License. The Add License page appears.3. Copy the license from the email, paste it into the License field, and click Submit License.-- DD ...

I am trying to setup NTP from a router that is behind an ASA. I am trying to sync it with time.nist.gov (UDP port 123). However, the "sh asso det" list the NIST server as "insane and invalid". The ASA does do a source NAT and also changes the source ...