Network Security

I have a printer sitting on an outside interface e0/7 that external vendors were able to print to prior to an ISP IP address change and IOS upgrade.We upgraded our IOS from 8.2.1 to 8.2.5. The printer wasn't changed so the MAC address mapping is stil...

Hello Folks,Is there an elegant way to perform QoS/Shaping/Policing on traffic entering a network through a firewall via Public IP?Let say I want to throttle traffic coming from 8.8.8.8 into my network, could this be done?Thanks!                  

Hi Experts,I have been going through Cisco.com and Google searches but cannot seem to find any answers to this so hoping I can get the answer/link I here.Basically, the questions are as follows:-A.  Does ASA-SM support clustering and if so how many b...

I am trying to set up my ASA5510 the failover of ISP when it can't ping three different IP. I create three different tracking to three different IP using sla monitor & track rtr. But when I do   route isp2  0 0  yy.yy.yy.yy  50   route isp1  0 0  xx....

I have an ASA 5505 with Security Bundle license.I am able to create 2 LAN networks (192.168.9.0 and 172.16.9.0) Vlan1 and Vlan12 respectively. I also setup 2 outside interfaces (outside1 and outside2).Network 1 (192.168.9.0 - VLAN1) has no issues goi...

Since the 5500X series firewalls use a software IPS SSM that is set up differently from the old ones, I am a little confused on the initial setup.Looking at this document http://www.cisco.com/en/US/products/sw/secursw/ps2113/products_tech_note09186a0...

Hello Everybody.I tried to start my ASA 5510 for first time, and the issue is that it is directly running in ROMMON mode.So I want to know why is it starting in this mode? what could likely be the problem? Also i resquest anybody who has a solution t...

Hi,I have a scenario where i need to enable nat reflection or understand how I can make this work on a ASA 55x5-x for a specific design of telepresence equipment.There is a equipment that sets inside the network, and its peer (or slave) that sits on ...

I think the problems are related to NAT and how it is implemented in 8.4. Any help THANKS!!1) vpn client connects, but can't access the network2) I need to allow pcanywhere traffic to go through the ASA to host 192.168.200.99. The remote host is a DH...

Hello there!Could URL FIltering be implemented on Cisco ASA 5505-BUN-k9?i mean to block certain websites, like facebook, youtube, to block certain download files like .exe, .com .bat etc....Is there any extra license needed for this, or it could be d...

Hi,i setup a test LAB with NAC Dot1x Framework, and i facing an issue where by the port keep on repeating triger reauthntication, althought the next reauthentication is not yet reach, i try configure re-authperiod to using local rather than radious s...