Network Security

Hi,I wanted to implent a cluster of 4 ASA 5585-X between DCs. Before the firewall I would like to use the  IPS module. My three quesitons are:- Can I use the IPS software appliance if the firewalls are clustered and avoid the IPS hardware module?- In...

Hi,Please provide the information that  can i change the security level on my asa firewall for outside interface. This ASA firewall presently running and handling the live traffice.Will it impact on the traffice if change the security level.  

I have an ASA 5515 with version 8.6(1)2.  The ASA is configured with an Outside and Inside interface.  Internet access from Inside to Outside works as long as I enter IP addresses for external DNS servers on my workstations.  On my workstations I wou...

Hi, please  help  me to  resolve  the issue.  i have  created  a DMZ  Zone   Network  with  public  IP Addresses.i have  created   Identity   nat  for  DMZ  Network  access the internet.  The  server  in the DMZ  Is  accessable  from  Internet.To  ac...

Hi,I recently purchased an Apple TV and am having trouble using AirPlay on my network.  I have an ASA 5505 running 8.4(6) code and an Aironet 1142 access point connected.  My laptop and my Apple TV are on the same wireless network, but cannot see eac...

Going from a Pix 515E to an ASA 5515 and trying to mirror the configuration.  I believe I have most of it correct, but this one issue persists that I'm trying to get resolved.  There are a number of vpn tunnels that terminate on the Pix and on some o...

ASA Version 8.4(3) interface Ethernet0/0 nameif outside security-level 0 ip address 8.8.8.148 255.255.255.240 ! interface Ethernet0/3 nameif inside security-level 100 ip address 192.168.200.253 255.255.255.0 ! same-security-traffic permit in...

Hello,I am having this strange issue with the HTTP traffic passing through the firewall. There is no any policies configured on the CX module for web or application filtering however when I reload the CX module, the traffic is being allowed through t...

Hi,I have configured 10 interface vlan on my cisco core switch 6509.However I want my users SSH it on management IP only. SSH access on other IP (defined for each interface vlan) should be blocked by switch.Kindly suggest how to configure this.Thanks...

I have to install an ASR1001 on the internet for my company.  I noticed the ASR1001 has a dedicated managment port and I was wondering if it's a security risk to have this mangment port directly connected to my LAN, so I can mange it from my desk.I o...

Hello,I see that with threat-detection enabled and configured, I can use the "threat-detection scanning-threat shun duration [time in seconds]" to shun IPs that are scanning for open ports.Is there a way to shun syn-attacks that I have a threshold se...

Trying to setup dynamic access policy to restrict some users from being able to get on VPN. Our default policy allows everybody on VPN, we just need to exclude a small number of contractors. I created an AD group called NoVPN & put a new test user in...