Network Security

I have configured Basic firewall on my cisco 2911, I want to open port 80 for a packaging machine IP (192.168.0.28 255.255.252.0) which uses tcp port 80 to connect with live ip of its server in case of any technical problem, so that support technicia...

Hi. I've noticed that my IPS is blocking this: Novell ZENworks Desktop Management TFTPD Code Execution:  sig ID:36790It also signalling that I am an attacker.Two Linux machines and one Windows Server 2008 R2 are classified as those attackers  . Does ...

The setup is simply this: Verizon D-Link DSL Modem/Router in bridge mode (ethernet ATM bridge) to ASA5505 to PCs.The PCs get an IP address, default gateway, DNS server IPs from ASA5505.Win 7 and XP Pro PCs get IPs, but message warning "No Internet Ac...

Hello everyone,I've just constructed a very small, very specific policy-map for the first time on our ASA 5510 and I wanted to run it by you all to tell me what I am doing wrong (I am sure I've messed something up) and how I can resolve it.The use ca...

                   Hello All,just wondering if the prevailing philosophy on firewall management is to 1) allow everything outbound and restrict inbound or 2) restrict both inbound and outbound?We have a situation where we are getting hit with ZeroAcc...

Hi Allis it possible to create a ACL to permit from any to a particular ip address? i.e I have a ASA with three interfaces (inside, outside and DMZ) and I want to create a ACL to permit from any to inside host (this is probably a bad example but anyw...

I have a Cisco 5505 and have an access point plugged into the POE port 7.I have 2 SSID'S on the access point vlan 1 - production on the 192.168.70.0 /24vlan 10 - guest                 172.16.0.0 /24 I do not have a  seperate DHCP sever so the ASA wil...

Hi community,Can you share your idea can we prevent VOIP traffic like skype, kakaotalk, wechat, line...? If we can, how to do it, in general?. Because as far as I know these applications are peer-2-peer and use dynamic ports and update version very q...

Hi,We'd like to implement ASA5585 with SSP-60.I knew that the inspection will stop while the signature is updating.because sensor app will be stopped.I guess there are only one signature database on IPS which is managed by IPS device.It means every v...

I'm attempting to configure an IPS for my first time and have a few questions... I went through Cisco's quick start guide and it appears that the ASA management and IPS management can have seperate IPs on the same management interface, is that correc...

Hi Team,I need one validation from you. I am working on the project and the scope is to use “vCloud Director” with Cisco VSG and ASA 1000v to provide intra-tenant and Edge firewall capabilities and not to use vShield Edge.  Is this approach do-able?C...