Network Security

Dears,I have a query regarding Site to Site VPN setup between a Juniper SRX 3600 and Cisco asa.We have a Cisco ASA and the client has a Juniper SRX 3600.Scenario here is our end Cisco ASA outside interface is private ip (10.10.10.10) & Public ip(stat...

Can you please help us how can we configure the IDS/IPS in cisco asa firewall

Hi All,I am having a cisco ASA5510 - 8.2(5) version in standalone mode. Randomly this firewall gets high cpu have to reboot it everytime.during the issue, when enter show cpu usage, im getting core cpu as 99% after 5 minutes. Hence getting a console ...

I am testing ASA 5550 to allow inside servers outside access through static NAT. I have done reading Cisco's documentation about how to set it up.my test network:OUTSIDE ROUTER (2811) ----------(OUTSIDE) ASA 5550 (INSIDE)(OSPF)-----------INSIDE ROUTE...

Hi,Perhaps someone smarter than me would be able to shed some light on this situation:ASA 5505, 9.1.4, BT Fibre 80/20, ECI modem, PPPoE dialout on the outside interfaceEverything works fine (well, I've had to lower tcpmss to 1300 as I've been getting...

Hello,Has anyone upgraded their ASA's IOS to the recommended version as mentioned in this link --> http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20131009-asa?I have upgrade my 8.2 & 8.6 softwares to the new release ver...

I've been having thoughts about this for a while. We know that PAT uses  TCP/UDP port numbers to distinguish between inside hosts via a mapping  table for private IPs, internal/external ports and all that stuff, all  happen so that the return packets...

I currently am trying to set up an ACL to allow only type 11 ICMP messages back through the outside interface of our ASA using specific hosts and destination addresses.  Currently I have two object groups set up with internal address (object group 1)...

Hi all;Is there anyway to check who is trying or have tried to hack network ? I am using ASA 5520 firewall. Is there any command to check it ? Thanks.

Hi all;Is there anyway to check who is trying or have tried to hack network ? I am using ASA 5520 firewall. Is there any command to check it ? Thanks.

I am having some issues getting the dmz server up and running. I have internet access from inside.I would like internet access from dmz.Also outside to dmz.I have tried adding static routes and configuring the ACL to no avail. I know this is pre-8.3;...

Hi Guys,I have 2 interface on ASA inside and outside using nat to hide outside IP from inside users.inside : 1.3.3.0/24 subnet for usersoutside : 8.1.1.0/24 dmz serverI created nat and users able to access file server in dmz.Is it possible for users ...

Hello Everyone,I currently have an RV042G with a downstream SG-300 connected to one of the LAN interfaces.  Connected to the SG-300 are a couple servers running ESXi.  Intervlan routing is working fine on the current setup; however, I only able to co...