Network Security

Hello,     I have an ASA 5505 running 9.0 in routed mode. I have everything working fine with the exception of one item. I've set up port forwarding for the services that I need to have running such as HTTP, FTP, SSH, RDP etc... They all work from ou...

Hi,We have the following policy on a firewall to limit the maximum number of connections:policy-map global_policy class HTTP  set connection conn-max 2250 embryonic-conn-max 100 per-client-max 20 per-client-embryonic-max 5   set connection timeout ha...

Hi Community!I've got an ASA 5520 (8.4.3) Failover Cluster.Behind this ASA i have a couple of DMZ Networks. In one of these Networks (lets call it DMZ-A) i have an performance issue.So, in DMZ-A i have 2 Windows2012R2 servers.IP Server1: 10.0.233.10/...

Hi everyone!Would love to get your input on this attached network setup when it comes to config of the SIP/NAT rules.Since the two networks on each side of the ASA have the same network ranges it makes it all rather difficult.What I have tried is to ...

I understand from the Cisco documentation that a service-policy applied to an interface on an ASA 5500 series firewall, will override the default global service-policy.  However, I am not clear on whether it will override the entire global service-po...

HiOne of our Customer currently running Juniper firewall and we tried to replace it with the ASA 5512 Firewal l Using attached configuration .every vpn , internet connections are working fine but after we connect it to the LAN side following issues c...

I need help on CISCO PIX 501 Firewall, it comes with console cable having serial port, but systems now a days & the one i am having are not having serial port so i am not able to access command-in-line , is there any alternative way, can it be access...

I am having some problem in installing & configuring CISCO PIX 501 firewall, console cable came with it is having serial port, wheare as systems coming now a days & the one with me does not have any serial port, How i could access command-in-line for...

Hi,Is there a signature that can detect ( and prohibit) delete action of files and folders on ftp server.If none, is there a way to create customized signature?we want our ftp server to allow only download and upload files and delete is not allowed f...

Hi all:I went through ASA documentation, there is "mac-list" configuration command to configure mac address access list.Refer to the link:http://www.cisco.com/en/US/docs/security/asa/asa82/configuration/guide/access_fwaaa.htmlunder the topic of "Usin...

Hi,I have some questions about the Cisco ASA 5500-X NextGen Firewalls.Focusing on the Cisco ASA 5512-X Series. If I want to do application and micro-application inspection (AVC) including SSL decryption on the ASA itself I would need the following:- ...