Network Security

HI Guys I have read many articles but I need a details explanation on what is the difference between drop and deny.Your answers are really appreciated.  Thanks!

Hi,IS it ASA cisco 5510 desnt support VPN sha-2 ?Can i have the document

I've got a PIX firewall running 6.3(1) and I can't get any traffic to go from Outside to Inside and I can only get icmp traffic to go from Inside to Outside.I've tried to open it up completely so all traffic will flow (will the though to locking it d...

I have a site to site VPN configured. It was working fine until today. Packet tracer says ALLOW all the way through flow creation. However, I cannot ping the devices (where I COULD yesterday). I'm at a loss. To me this indicates a change elsewhere. A...

I have a customer with 2 running 5520's version 8.2(and configs several thousands of lines long)(we're not in a position to upgrade these)The customer has bought 2 new 5525-X with version 8.6(and this can't be downgraded to 8.2)How do I get the 8.2 c...

Hi all,Can anyone explain what is more secure when addressing the outside interface of a firewall in a network diagram?1st option:                             ISP router:                                interface 1 (connected to the internet).        ...

I'm currently using an FWSM and we are migrating to the ASA with 9.1 code. The nat is WAY different and I have some questions:1)  To do a PAT to the outside, is it just object network TEST123 subnet x.x.x.0 255.255.255.0nat (inside,outside) dynamic <...

HiI have two cisco ASA routers & wish to connect them together so that traffic between is permitted with out going outside interface.Two asa are located at in ONE office and two have separate internet connection (ISP) configured. So here is what I di...

Hey guys!We've started using the AD Agent a year back or so, and now we've migrated to CDA but we're having some issues.We have 4 domain controllers and they are configured in CDA and show as OK, so all good there.But the ip to username mapping is no...

Hello everyoneI am having some problems trying to set up a simple one-to-one NAT between a public IP and a DMZ server. I've spent a number of hours staring at this problem and I'm hoping one of you can spot whatever I have missed.The ASA has 4 interf...

HiMy background is Wintel servers, but thought I should get to grips with some Cisco networking so brought a second hand ASA 5505 from eBay for home to play with. When it arrived the previous config had not been cleaned down and there was a password ...