Network Security

Hi,My first post here and it's a question regarding knowledge that I can't seem to find via CCW and through people I know.Does the Service Module in the 6500 i.e. WS-SVC-ASASM1B-K9 come with or support an IPS/IDS option?Does a stand-alone ASA5500 com...

Hi guys,I have scoured the cisco data sheets to try and determine whether or not the 5515-x series ASA can handle URL filtering.According to :http://www.cisco.com/en/US/prod/collateral/vpndevc/ps6032/ps6094/ps6120/data_sheet_c78-701659.htmlIt shows t...

                   I think i have configured an ASA 5505 for DMZ.There is an outside ip 96.229.98.123, which should allow remote access (3389) to a computer which should bea DMZ, 10.1.1.99.I am unable to get to this computer (windows XP) using the ou...

Hi gurus of Cisco.Could you explain me please, what meaning this line:!First Natglobal (outside) 101 36.161.215.110 netmask 255.255.255.255nat (inside) 101 0.0.0.0 0.0.0.0!Seconf Natnat (WAN-Inside) 0 access-list WAN-Inside_nat0_outboundnat (inside) ...

We’re currently (and have been) able to log VPN access through our firewall for our IPSEC clients via RADIUS in MS InternetAuthentication Service (IAS) on our domain controller.  However, moving forward with LDAP authentication, we need a replacement...

Hello I am looking for a documnet which list the security attacks and signtures that the ASA 5555+ IPS can defend from . such as - Syn Flood, UDP Flood, ICMP Flood, IP Address Spoof, IP Address Sweep, Port Scan, DoS and DDoS, Teardrop Attack, Land At...

Hello to you allI have a very big ACL I want to implement (over 1000 lines), and I´m trying to minimize the impact and latency an ACL this size would bring to the network, so I wanted to group my networks and services into different object and servic...

Figured out issue.  Nothing to do with the ASA as usual.

Hi All,1> Created two NT groups in window VPNusers Networkusers2>created two group in acs such as Routernetworkadminswitch networkadmin.3> Mapped vpnusers with routernetworkadmin   mapped networkusres with switchnetworkadmin4> Created two NDGCoredevi...

The group policy we are currently using for anyconnect is assigned to only use sslvpn client as the tunneling protocol. Whenever anyone connects directly from anyconnect it shows them as a clientless session. Any ideas on this? Needing this fast if a...

Dear Team,I am having multiple vlans in my organisation. My organisations is divides into 4 floor. Each floor is contains the multiple vlans. I want to configure the complete redundancy. Can you please suggest the network topology for the same?

I'm currently using the Inspection Engine to prevent most users from accessing .zip (and the like) files.  However, this also blocking some websites used during daily business.  I keep getting the following or similar syslog message:%ASA-4-507003: tc...

I am having trouble getting my L2L VPN between two sites working.Site 1 ASA 5510 - dynamic outside interface IPSite 2 ASA 550 - static outside interface IPWhen I do a static to static it works just fine but since the outside interface will change eve...

Hi,Need some help with PAT. I  want to use a different public IP address for NAT from the one assigned to the "outside2" interface. Below are the configs that I have used. When I am running "Config - I" (please see below) everything is fine, i am abl...