Network Security

Hi, Question 1:From which signature in reconnaissance can detect scanning such as nmap or qualys.?I performed scan but none is detected. I think it is not just enabled. Question 2:I may allow scanning from time to time but with source address defined...

Hi All ,I have an issue with static NAT on ASA 5520 Version 9.1(2) firewall.Configuration as below interface GigabitEthernet0/0 description outside nameif OUTSIDE security-level 0 ip address 10.x.x.x 255.255.255.0!interface GigabitEthernet0/2 descrip...

Hello,I have an issue where a customer is trying to connect to a FTP server sitting behind a cisco asa 5505 (version 8.4). I don't think there is an issue with the firewall, but wanted to see if someone out there could shed some light on what the pro...

I have an ASA 5500 Firewall. I need to figure out how to log all events using Port 25 to determine if there are any rogue devices on our network. I was trying to figure out how to do this via the Real-Time Monitoring (filter) but have had no success....

Hey all, I have an ASA with a 50 user limit. Below is the current "Sh local-host" output and I just wanted some clarification on what exactly some of it is.  Detected interface 'outside' as the Internet interface. Host limit applies to all other inte...

Hello,in our internal LAN, I have some different servers, which can be access from the Internet by different ports. I do this by using NAT with specific services.So let's say, we have the following IP addresses:External IP address: 1.2.3.4External do...

I'm trying tu publish my Polycom codec outside, and i did for this purpose static NAT according asa docs.interface Ethernet0/0 nameif Outside security-level 0 ip address X.X.40.98 255.255.255.240object network HDX6000-INT host 192.168.42.33object net...

Hi,The user can login with their valid AD account. The remote laptop receives a correct IP address from the ASA IP DHCP pool (192.168.210.231-192.168.210.250). However, the remote laptop CANNOT communicate with other internal networks (i.e.: PING). T...

I was trying to perform NAT-C on ASA 8.2. The setup was pretty simple. I had an Inside (Security-Level 100) interface, DMZ (Security-Level 50) and an Outside Interface (Security-Level 0). I wanted to perform Nat from DMZ hosts to Inside hosts. When I...

Hello all,We have two Cisco ironport C370 appliances.There is one Product Authorization Key for the ESA Inbound Essentials SW Bundle (AS, AV, OF) License.And there is a term called "entitlement quantity" for the ESA license.The value of "entitlement ...

Hi AllThis is my case: In the lab I could configure mDNS on my 5508 with the global multicast and igmp snooping disabled. Only I needed was Global mDNS multicast enabled (based on Cisco Guide) and it worked fine under the following scenarios:All the ...

Hi Guys,I have 2 ASA 5520 to upgrade from 8.0 to 8.2. Can someone please send me the instructions on how to do this? Any help will be greatly appreciated. Thanks,Lake