Network Security

Dear all, We are trying to allow only a specific IP range to connect to our email server on port 25 from an external source.We are using NAT object policy to allow SMTP traffic through the firewall but this has been configured to allow all SMTP serve...

I was testing to see if I was having asymmetric routing to an ASA inside interface from a router. The following does not work andon the ASA I get error ASA-3-313001: Denied ICMP type=8, code=0 ....R1#ping Protocol [ip]: Target IP address: x.x.x.x Rep...

Hi All,I'm having problem on nat using Cisco ASA ver. 8.2 see below configuration...interface Ethernet0/0 nameif outside security-level 0 ip address 2XX.1XX.2XX.218 255.255.255.248!interface Ethernet0/1 nameif inside security-level 100 ip address 172...

My FWSM is having high cpu utilization and only happen in the morning around 8am-9am. From the show process, I can tell the fixup feature is occupying the highest runtime. Question is ... is there any show command to tell which particular fixup featu...

I have been getting these in my logs files.  I have removed the entries, and the log messages went away.  Any reason as to why they started showing up?%ASA-4-402127: CRYPTO: The ASA is skipping the writing of latest Crypto Archive File as the maximum...

I have a Cisco ASA 5520 , today a strange thing happened when we were attacked by an IP 64.62.238.46. Below are the logs from ASA<138>Mar 06 2014 13:52:20 ASA : %ASA-2-106016: Deny IP spoof from (226.181.118.151) to 64.62.238.46 on interface insideTh...

Cisco noob with an inherited network here I have a simple question that may have been resolved in a nother forum however; I am not able to word it properly to get a response. We are using asa 5510 and we have 5 of them. They are configured an running...

HiI have a unique issue when trying to setup our new 5512-x firewall in single transparent mode. I'm new to ASA world and would appreciate if someone can help me out.I would like to give a bit of background here. I work in a university and we have di...

I need help setting up a port forwarding rule on a ASA v.9.1This pains me to even ask as I have set these SIMPLE rules up over the years on all sorts of firewalls, netgears, belkins, drayteks, etc....As I started studying for my CCNA I began to love ...

Hi Team Can cisco routers will support statefull inspection if so how ?I was attended an interview, in the managar round he asked me what is the main  difference between Firewall and router/l3 switch ?in place of firewall we can use router also then ...

Hi my  name is Isaias. I have recently been tasked with a project at work. I am the IT guy for a small law firm. So what they have is a Time Warner Surfboard Router>Asa 5505Firewall, Cisco Switch, Small Business Windows Server 2008. I have been taske...

I'm new to Cisco and we just took over a client with an ASA 5505 I need to do 2 things first I  need to know how to open or forward ports to an internal IP address   they want me to open ports 3389 and 1433 to an internal address   192.168.192.52but ...