Network Security

Hi All,I have a firewall (Cisco ASA 5520) running; acting as Internet edge with interfaces going to DMZ, Internet and LAN. I have been able to copy/translate the config from the 5520 to 5515-X; LAN users can get to the internet, but sessions going fr...

Activating a split-tunnel configuration managed to kill VPN access to hosts on the inside interface completely.  (as in a logged in VPN user can no longer ping or RDP to a host on the inside)  Did I miss something at 4am? Bug in 9.0(2) ?  It worked b...

Hi All,Would anyone be able to advise on how to restrict/block staff from being able to download large content(files/music/movies) from the internet please?The only device we have is a Cisco router, model: 2921(IOS version 15.1(4)M4). I've looked at ...

Based on the following post, cisco IPS' can send basic syslog messages: https://supportforums.cisco.com/discussion/12180461/cisco-asa-5585-syslog-options-ipsDoes anyone know which messages are sent via syslog?Also, I understand the Cisco IME can be u...

I have an ASA5505 I am trying to integrate into our network, however the ASA5505 won't allow our server to access the internet via our HP Procurve layer3 switch. Currently, only the server is connected via the switch as well as the two trunk lines to...

Hey guys I'm experiencing some kind of weird behavior of my ASA 5520 (8.3.1)I have a customer that needs to access an inside webserver of mine.I've created a rule in the proper ACL permitting another range of their address to access the web server.I ...

Hi all,I am working with a Cisco ASA 5500-X requirements and I would like to know where I can get some information about 5525-X and 5545-X.Information like Stateful Inspecion throughput, CPS, Interfaces, etc I can get in Datasheet.But information lik...

Hello! My ASA 5505 won't boot up correctly showing(after a long time (3-4 min):i2c_read_word_w_wait() error, slot = 0x0, device = 0x64, address = 134 byte count = 2. Reason: I2C_UNPOPULATED_ERROR I tried some solutions, like:rommon #3> confreg 0x41 o...

I have an ASA-5505 running 8.4  I have entered the following ... object service WLG-Rng-1 service udp source range 10000 11000Then this ..nat (inside,outside) source static VOIP-Sys-4 interface service WLG-Rng-1 WLG-Rng-1The nat command fails with "E...

I have a Cisco ASA 5550 and using ASDM 6.2.Opening the ASDM, in Firewall Dashboard, in Top 10 Access Rules, show the second rule with more hit: "interface X | source: any | Dest: any | Service: ip | Action: Permit.During the day, the hits increase an...

Hello,Does anyone knows how long are the IP-to-user mappings kept on the Cisco Context Directory Agent?Is there a setting that dictates for how long to keep these mappings if a user doesn't logoff? The scenario i have seen is that user lock their PCs...

I have been struggling to add commands to open ports to my access list.  They are needed for the alarm system and our voip.Below is my current one,  but not sure where to put in the requirements below in red. Realy need help fast as these services ar...

Hi All, Please correct me If I am wrong. I am upgrading from 8.0 to 8.4. One of my customer has nat rules in 8.0 as belowFor all the access lists for below they used permit ip any anynat (inside) 0 access-list xxxxxnat (outside) 0 access-list xxxx ou...