Network Security

Hello,although we all know he problem of Cisco IPS's with Java, and knowing that java vulnerabilities are increasing, updating Java version is not allowed else we lose the ability to open IDM for the IPS's.Another thing is appearing now, is that I wi...

Hi, I have a Cisco 5510. I am using Symantec Message Labs cloud for filtering emails for SPAM. Once they are filtered, they are then sent to my ASA firewall. Apparently there are some emails after being filtered that are being forwarded to my firewal...

Good Evening,Recently, I'm having difficulty with my home office connectivity.  I have a 5510 ASA configured for dynamic PAT using the outside interface.  The setup is pretty basic, but I've noticed that HTTP/HTTPS traffic is getting denied coming ba...

Hi,I have four sites that use ASA 5505's that connect to the main office's ASA 5510x in Dallas via site 2 site tunnels.  I need to setup QOS for voip traffic from our Houston site and possibly the others in the future.The Houston site  has four ip ph...

I've been having a devil of a time getting exec-timeout to clear idle vty/ssh sessions. This investigation started when we were rolling out new Catalyst 4507R+E switches with Sup7L-E's under IOS XE 03.04.02.SG (what they shipped from the factory with...

I need to upgrade an asa5520 from 8.0.4 to the latest version. I know the access list and NAT statement has changed from 8.3. Would a straight upgrade work or is there anything else i need to do?Any help will be greatly appreciatedThanks,Lake 

 Hello experts,I am using Cisco ASA 5520 Firewall with 8.4 image.Q:-Configure ASA for blan(security-level 10) address 10.10.10.1 to be mapped to 10.20.240.250 such any connection requests to 10.20.240.250 are answered by dmz server(security-level 50)...

I inherited an issue on a production firewall, pertaining to a new FTP rule they put in.  The config is a bit out of order from what I’d normally do, I’m guessing due to being put in by GUI and not CLI.  Here is what is pertaining to the FTP, I belie...

I am having difficulty with a site to site VPN using the wrong crypto map. When i try to bring a site to site tunnel up with a 3des / sha1 tunnel the, tunnel tries to use aes / sha1. is there a bug in the 9.1 code that could be causing this issue. I ...

Hi All,we have ASA 5510 which we need to upgrade from 8.0(3) to 8.2.5.can we directly switch to 8.2.5 from 8.0(3) , if not what all versions we need to go from.What all point needs to check before that It will gr8 if some one guide around steps & ris...

Hi, please  advice  the command  to  configure  a DMZ Zone  in the  cisco  Asa 5510 Firewall.i have  already  inside and  outside interfaces.  All the users  need to  access the servers  in the DMZ Zone  and from  internet as well.All  the servsers i...