Network Security

Hello! I'm trying to set up a firewall rule to allow TFTP traffic to come from my switches in my DMZ so as to do proper configuration backups. Ideally I'd like to allow ONLY these 2 IP's for TFTP traffic and nothing else. I set up the below rule for ...

H Guys,My server farm is connect to a 6500 switch, vlan 2 (172.28.2.0/24) was assigned. Now I am working on a ACL to protect those servers. The requirement from server owner is to allow certain TCP ports (he provided some tcp port numbers).I had crea...

Hi I have 2 OSPF process on my ASA5520 but have backbone areas, but there doesn't seem to be a way to allocate interface to specific OSPF processes. I am running 8.4(7)  

Hello,I inherited a network with two Cisco ASA 5540's, one connected to the primary ISP and the other connected to the backup ISP. Each ASA has a connection to three switches on the three remaining interfaces. See the diagram below for more details.A...

Hi, my customer operates himself a VM for Cisco ISE, so he needs no smartnet service thats ok. Now he needs L-ISE-BSE-100= (Base Licence) 100 teers. Question: Can he gets during 5 year maintenance time updates and tecnical support for free??

Hi, Can any one  shed light on whether SUSA (Now SUSW) is absolutely needed as secondary coverage to the SU1. With the SU1 what kind of support is provided on for the signature?? Many thanks in advance for your soonest response.

Hi I have IPS with version 7.0.4 and I need update to version 7.1.8e4 but i can't load the license because show a message is not support for this license. Then the device has other license but the devices not run other license only 7.1.x but i can't ...

When configuring an ASA for IPS, does the IPS access list need to be the first access list in the configuration?  For example, in our environment, we want to have every packet go through the IPS.  So, if my current configuration is as follows, does t...

I recently went to enable IPS on my 2901, and I noticed a massive latency issue when I enabled it.  Throughput dropped from 120MBPS down to about 66-68MBPS.  Is there a way to institute IPS on a router without experiencing this kind of severe degrada...

Hi There,I have the following Interfaces and routes. interface GigabitEthernet0/0.127 vlan 127 nameif Vlan127 security-level 50 ip address 192.168.127.1 255.255.255.0!interface GigabitEthernet0/0.128 vlan 128 nameif Vlan128 security-level 50 ip addre...

Hi everyone, I need help setting up an ASA 5510 to allow all traffic going from the inside to outside so I can get internet access through it. I have worked on this for days and I have finally got traffic moving between my router and my ASA, but that...