Network Security

Hi,To put my Webserver(DMZ) comunicating  with my SQLSERVER(INSIDE) I made exemption of  nat in outbound in both directions. Is this secure?The protection of inside network trough nat isn´t compromised?Is there any other or more secure way to do it?K...

Hi,I´m having problems in configure my ISP Static address. After reading I know that ASA 5505 share phisical mac address to all ports off the switch. And in ASDM I access to the interface and in advanced option is possible to configure one mac.But wh...

Someone save me from my confusion.I'm familiar with the classic use case of NAT/PAT, where internal hosts use many-to-one or one-to-one nat when going outbound. What I'm not as familiar with is what can I use if I have a 10,000 port range that extern...

Hello,we have to change the provider which includes an ip address change of our public ip addresses. In our DMZ we have a couple of server which needs to be accessible to the public. With the new provider i have change the nat addresses of those serv...

Hello,We have a WAN link between 2 of our offices (MPLS), but I want to put in a redundant link as this remote office has a 20mb Internet pipe via their Fortigate firewall, we have a 100mb Internet pipe. We have an ASA and I have created multiple sit...

hii just connected to PIX to networkips that i have assigned to pix, servers also exist in that subnet.suddenlty i noticed servers are not getting proper reply cannot access them properly.at end i notice that interface that was connected to pix ip we...

Hi allI would like to find out the right debug command on my case:ASA 5525X load with 8.6.1 code, the symptom the multiple subinterfaces' i created will went down after certain period of time, with unknown behaviour. There's no physical issue (the ca...

Hola Amigos!Tengo una duda y acudo a ustedes, actualmente estoy trabajando con un Cisco ASA 5505, que redirecciona mi IP pública al servidor Web detro de la DMZ, la pregunta que tengo es: podre direccionar otro dominio con la misma dirección IP? como...

Has anyone completed FWSM service modules to ASA appliances migrations will to share some advises? thanks.Leo

      Once in a while, it becomes necessary to troubleshoot network activity and the packets' journey through the IPS.Is there a simple way to completely ignore an IP address?This question pertains to the asa 5585 with the IPS module and IME v7.1(6)E...

I have 2 ips license of cisco asa and one of them i has been used but i dont know which one has been used so how could i know which one used, what is the validity period and how could i update license if required please try to provide me each and eve...

hi all;dose the ISE support the  guest self-service , we are planning to broadcast Guest SSID , this SSID will redirect the Guest for self-service page to enter his mobile number , then the guest will click on subnet button , after that the ISE will ...

Hi,Our ASA5500 created a Crypto Archive File,crypto_eng0_arch_1.bin, as attach file.Can anyone help to analyse the Crypto Archive File ?Thanks.

Hello,I have high cpu load on ASA 5520, I'm supposing there is burst traffic (even though I do not have many interface overrun errors). How can I detect burst traffic ? I've tryied to use a netflow collector but I could configure on ASA a timeout rat...