Network Security

Hi,Am trying to make DNS filtering work as URL filtering cannot permit https traffic.Config is as per below. The thing is that it blocks every url at the moment instead of just test  - gmail.com as per regexIt looks simple on the paper but cannot mak...

I have an ASA 5510 using version 8.2(1) and I have enabled ssh, icmp and they work from the inside network but not from the outside network.  Further to this, I exposed one site from the inside interface on the ASA (192.168.1.100) to outside (1.1.1.7...

Dear cisco experts, we've got a pair of asa5540 in active/standby mode and we would like to install IDS modules on them. however there are some licensing issues: should we buy additional license for ASAs to support IDS modules (we have VPN Premium li...

Hi,basically I am trying to achieve what's documented in http://www.cisco.com/en/US/docs/security/asa/asa80/release/notes/asarn80.html#wp242704(using ASDM: "crypto ca import" = Remote Access VPN -> Certificate Management ->  Code Signer -> Import) I ...

We have a failover pair of ASA5520's running 8.4.4, and we need to renumber our external connection from one ISP to another ISP.I would like to do this in a stepwise way, i.e.connect second ISP to spare interface (which we have)move one service from ...

  Morning, I need a little clarity and advice setting up an ASA 5512-X, specifically how traffic is routed.Currently at the edge I have an ASA 5510 which has been great but has limitations in the number of ports, the speed of the ports and module cap...

                   I am checking the IOS image file name with help of show version command but i am not able to see it.copy flash :address or host name:source image file name:( i need to specify the image file name here).. other thing one more doubt ...

I am looking for a new firewall for a client. This is an SMB client, around 35 computers and 2 servers. Budget is $800.00 or less. Some of my other clients are using the 5505 and they have been pretty solid firewalls. However, they are lacking in som...

HI all,I need to be able to redirect some HTTP traffic to an Ironport WSA (for now) on a DMZ interface, the initial config I'm trying to test is along the lines of the following (don't have access to the ASA at the moment to cut-and-paste, sorry):acc...

I'm not very proficient with older PIX 6.2(1) code and I have the following scenario for a customer and was wondering if anyone could please help me.  Have interface to access PIX device on 10.1.1.242, which is reachable currently from the 10.1.1.x n...

Hello,On our ASA 5520 I have the following config:interface GigabitEthernet0/0 nameif outside security-level 0 ip address 218.257.136.133 255.255.255.224 standby 218.257.136.134!interface GigabitEthernet0/1 nameif inside security-level 100 ip address...