Network Security

Hey there,We got one colocation and use one 2960 for all servers with an ip block /26. Now there's a server been attacked by DDOS which cause whole network slow down. We plan to buy one cisco asa 5512x in the front to prevent this kind of attack.  Th...

I currently have two ASAs configured as Active and Standby. I need to install CA certificates and apply them on the management interfaces of the ASAs as part of a network audit project. Will I be able to change configurations on one ASA at a time to ...

We want to implement Netflow so want to upgrade our 5510 to 8.2.5. But have a few questions.This device has 64MB of flash and 256MB of DRAM. Would I need to upgrade RAM? Right now we have about 25 site to site VPNs running through this thing as well ...

Hello, we recently updgrade CSM to 4.3.0 service pack2 and we figure out that objet are duplicated with _xx when push are perform to FW asa version 8.4.How i can resolve the problem in order to avoid this duplicated objets.

In the 'Home' page of the ASDM, there is the 'Interface Status' box that shows the status of each interface and how much bandwidth each one is using. Is there any place in the ASDM that I'm missing that can show real-time bandwidth usage for each of ...

HiI am looking to disable ACL optimization on a single context as part of a strategy to 'clean up' the firewall rule base.I was wondering if anyone had done this before and what there experience was. I would specifically like to know if it is likely ...

I have one external ip address of 200.200.200.200.  Then i have two different servers. One server is running https and smtp. I'm able to create my acls and static mappings to get that working. Now the second server i have about ALOT of ports (10000 -...

Hi,We are looking at doing a 2Factor authentication for certain server bound traffic using asa. the requirements are, asa should prompt for 2 factor authentication when admin users login to the servers ( hosted behind the firewall ) using telnet/rdp....

I have a Cisco ASA firewall that is setup with an inside interface and a DMZ interface.  I also have a Websense content filter that is currently filtering traffic succesfully on the inside interface.I setup a DMZ port for our guest wireless network a...

Okay so here is my network setup. I have a 1 ASA5505 setup at a remote location. My internet/voice provider has a router at that location also to route traffic over the MPLS for our location to location traffic, and to route traffic to the internet. ...

Hello!I am attempting to allow a single host to NOT be sent to the Ironport. It's a Linux box that needs to get to download.opensuse.org. I've tried adding an access list for that host, to an inet host via any IP. The traffice still goes to the Ironp...

Hi all!I have deployed an ASA5512-IPS-K9 unit that has the following 2 licenses installed:Cisco ASA 5512 SW License Security PlusCisco ASA 5512 SW License IPS SSP LicenseAll is working out fine except for the IPS SW module.When viewing the IPS using ...