Network Security

Hello everyone,I've just constructed a very small, very specific policy-map for the first time on our ASA 5510 and I wanted to run it by you all to tell me what I am doing wrong (I am sure I've messed something up) and how I can resolve it.The use ca...

                   Hello All,just wondering if the prevailing philosophy on firewall management is to 1) allow everything outbound and restrict inbound or 2) restrict both inbound and outbound?We have a situation where we are getting hit with ZeroAcc...

Hi Allis it possible to create a ACL to permit from any to a particular ip address? i.e I have a ASA with three interfaces (inside, outside and DMZ) and I want to create a ACL to permit from any to inside host (this is probably a bad example but anyw...

I have a Cisco 5505 and have an access point plugged into the POE port 7.I have 2 SSID'S on the access point vlan 1 - production on the 192.168.70.0 /24vlan 10 - guest                 172.16.0.0 /24 I do not have a  seperate DHCP sever so the ASA wil...

Hi community,Can you share your idea can we prevent VOIP traffic like skype, kakaotalk, wechat, line...? If we can, how to do it, in general?. Because as far as I know these applications are peer-2-peer and use dynamic ports and update version very q...

Hi,We'd like to implement ASA5585 with SSP-60.I knew that the inspection will stop while the signature is updating.because sensor app will be stopped.I guess there are only one signature database on IPS which is managed by IPS device.It means every v...

I'm attempting to configure an IPS for my first time and have a few questions... I went through Cisco's quick start guide and it appears that the ASA management and IPS management can have seperate IPs on the same management interface, is that correc...

Hi Team,I need one validation from you. I am working on the project and the scope is to use “vCloud Director” with Cisco VSG and ASA 1000v to provide intra-tenant and Edge firewall capabilities and not to use vShield Edge.  Is this approach do-able?C...

          Please help, I cant get the ASDM to run. Please see config belowCisco Adaptive Security Appliance Software Version 8.4(4)5Device Manager Version 6.4(9)Compiled on Wed 08-Aug-12 19:07 by buildersSystem image file is "disk0:/asa844-5-k8.bin"C...

One of our clients has a problem with their CSM deployment, they recently upgraded their CSM version which is deployed on a vmware environment, the services are listed as running and the webservice is available on port 1714 - when he tries to access ...

    Hello EveryoneI have a new ASA 5512 which does not allow me to use VLANs like I did with previous version.  I have 3 interfaces, inside, outside and dmz.  I want to add another unused interface to my DMZ network instead of uplinking my dmz interf...

Hi, We are deploying two Netscalers that are going to be sitting in our DMZ. The firewall also has an IPS module in it that inspects all the inbound/outbound traffic. The team deploying the Netscalers want to connect one interface to the DMZ and the...

I want to change de crypto key size in a Cisco ASA 5540 with 8.4(3) software version.Two keys are shown:plm-airf-gsni-1# show crypto   key  mypubkey rsaKey pair was generated at: 12:11:22 GMT-5 Oct 23 2013Key name: <Default-RSA-Key> Usage: General Pu...