Network Security

We have an unclass setup where we are PAT'ing to the internet via a 2911 router.  We've found that passive FTP from internal (client) to public ftp server is not working and I've confirmed there is no ACL denying.  The initial connection (login) is f...

        Hello, I have moved from a crappy router to a cisco 5505 running software ver 8.2. I have done the initial config and am happily surfing the net. How ever im haveing trouble setting up port forwarding.Can someone please tell me how i should s...

Hi All. I am going crazy with the Hierarchical priority queuing on asa 5505 .Basically here is an example of my setup but when I use show service-policy interface outside or the interface name all the class defaults have their counter increased apar...

hello guys,I'm having problems with the cisco ise in my company.every day is got the following error:Cause:           No NTP Server reachable from SPCISE01Details:           All of the NTP Servers configured on this node are unreachable. If NTP authe...

Hi AllI hope you can help with a number of questions I have around our existing Cisco firewall and the use of Contexts.We have a router with an inside interface eg A.A.A.A connected to a L2 switch then to a Cisco 5550 firewall. The link in place betw...

Hi there!I've a internet connection of 10Mbps.i want to limit one of the internal hosts, with IP 10.1.1.18 to disallow downloading with more that 3Mbps, or (384KB/s).How can i do this?Regards!

Hello all,We tried to upgrade our cluster Asa5520 version 9.0.3 last night!Today, the flow dysfunctions for, and we had an error in the GUI (Ressource Connect limit)why have we got this error, hardware it's ok for version 9 ? :Hardware:   ASA5520, 20...

Hi, So ive got a couple of external connections configured on an ASA5510...On the Device Dashboard, it no longer shows my "Outside" interface in the Traffic Status graph, its now showing one of my other external connections.How do you choose what int...

Hello All,I've installed the VSG and VNMC and it all looks good (everything's registered, everything sees everything else - VEM, VSM, etc.) however as soon as I try and apply a firewall policy to a port-profile from my VSM I get this logged in the VS...

I have a small office network with a single public IP address. Currently we have a static nat for port 443 for the VPN. We just received new software that requires the server the software is on to be listening on port 443 across the internet. Thus, e...

Last Night my users were unable to surf the web, other services, such as email and FTP were available.  I eventually noticed numerous "Shunned Packet" warnings when examining the ASA_5520 Syslog for the time period in question.For example:2013-09-22 ...

Hi all,I would like to setup a SPAN port on my outside interface on the ASA 5505.  I would like to see all traffice whether inbound or outbound.  Setting up a SPAN port seems pretty straight forward, my question is, if a packet hits the outside inter...