Network Security

Hi,We have ASA5585 running 8.6 in routed multiple context mode .One of the context has  one insideand one outside.Users on the inside are in the subnet 10.139.X.X , except 10.139.5.X which used for NAT , on the backbone , we configure static route to...

We have some ASA 5555-X firewalls running 9.1(2) with the IDS modules installed that have a pretty basic configuration used to separate multiple internal networks.  The firewalls are able to pass over a Gbps of traffic pretty easily as long as it's s...

Hello Gurus of CiscoI have the following firewall:Hardware:   ASA5510, 256 MB RAM, CPU Pentium 4 Celeron 1600 MHzInternal ATA Compact Flash, 256MBBIOS Flash M50FW080 @ 0xffe00000, 1024KBand Cisco Adaptive Security Appliance Software Version 8.2(1)Dev...

I want to deny this IP range                 10.25.0.1 – 10.25.0.255                10.25.1.1 – 10.25.1.255Permit only 1 host                10.25.7.136  255.255.255.192 Using access-list. with the  Current configuration interface GigabitEthernet0/0i...

We can trace from cli on asa5510 (8.0(3)) but can not from inside host. We have icmp and echo-reply on both interfaces. The logs show successful building/teardown of ICMP to/from the faddr and there are not any denies by acl's or errors.Any clues by ...

I have two ASA 5505 (A and B) configured with IPSec site-to-site VPN, both can talk to each other.I am planning to adding identical VLANs on both of them, is there any concern for using same VLANs?

Our network has slowed to a crawl and upon investigation it looks as if the ASA5505 is blocking returning traffic. The syslog is full of these from legitimate sites:2013-08-30 16:58:01 local4.critical 192.168.1.254  Aug 30 2013 16:53:38: %ASA-2-10600...

Hello,I am into a frustrating situation about a router Cisco 2901 (Firewall + IPS installed) and at every few days (3  -4 days) I get no internet connection . After I restart the router , the internet connection works.  I have a small datacenter :  2...

Hello,I have a project with high firewallying specs, and I am not sure if the configuration I have found will be fit for the requirements.Here are the specs:- Antispam and Antivirus (is this a subscription?)- Able to report CPU load over cripted SNMP...

Hi i'm new to the world of asa and i hope that someone can guide me in the right direction.We have a 5510 (7.1) with 4 active interfaces an one wanOur ISP have given us a public ip range. We have set up default route and we have connection to the int...

Hello Experts,I need some assistance to provide limited access from remote to local machines over STS Tunnel. The STS Tunnel is estlablished between two sites and I want that remote machine can access only few machines with specific ports.Lets say 19...