Network Security

Curious, but I had to deal with an expired license on our IPS s/w module on our prod 5555-x over the weekend.Is the IPS license something we have to pay for on a yearly basis ? When I opened a TAC case last Friday, Cisco sent me another IPS license t...

There are instances in our organization when our customers need to have a standalone IPS device due to environment restrictions.  In the past we used the 4240 sensors which are now, or soon to be, EOL.  The upgrade path is the ASA 5515-X with IPS ser...

HiI have been spinning my wheels trying to figure out how to allow users in the DMZ, who have their own Internet connection, to access a printer on the Inside network but nothing else.ASA software 9.1.1DMZ: 10.10.10.0/24DMZ interface IP: 10.10.10.1DM...

I am looking to expand my current DMZ which really hasn't been leveraged for much but I plan to reconfigure it and leverage it across three sites. I am wondering what is the best was to approach what I am looking to do?Some site details1. Three sites...

Hello experts,      Im a CCIE, but Im totally new to the penetration-testing world, i dont know anything about pen-testing. some one (an external company) has asked me to do a penetration-testing on their  netwrok through internet. Can anyone advise ...

Hi all,I want to know if I can do that with my ASA5515-X, I have two servers that can do the same thing, there are SSO servers, What I want to do is to publish the 2 servers on Internet with the same public IP address and on TCP 443.Is it supported ?...

Hello,I tried last night to upgrade the memory in my old 5510. It's about 5 years old and has the single memory socket. I followed the instruction included in the kit:Mfr. Part#: ASA5510-MEM-1GBI did wear an ESD wrist strap (genuine Cisco at that!) a...

I have 2 5585's that I want to install and connect to 2 different ISP's ( or in this case 2 different TLS connections to Verizon).  I have no way of port channeling the two TLS connectons except at the ASA itself.  The TLS connections are the the ins...

Hey all, any ideas would be great.Scenario:ASA has outside interface with a public IP, say 1.1.1.1  (This IP is global natted so people can access the internet, etc)global (outside) 1 1.1.1.1I need to open up port 443 for a few external servers to hi...

                   Dear All,i have the folloing case :i am using ASA as Certificate authority for cisco anyconnect VPN users,the authentication happens based on the local database of the ASA,i want to issue a new certificate every 72 hours for the us...