Network Security

I have a DMZ on my firewall.  DMZ interface is Sec-Level 50.  I want the hosts in this DMZ to have unrestricted internet access, and very controlled access to inside hosts.  My question, and I'm sure this has been asked before, is what should my ACL ...

GreetingsWe encountered issues and wondering if anybody had the same or similar issues with this code.We are sending print jobs utilizing TCP 1526/1527 ports from unix to unix server.  But for some reason when larger files are being transferred this ...

In ASA 8.2 in single-context routed mode I had multicast stub forwarding working with    igmp forward interface outsideon relevant inside interfaces with public-scoped IP addresses (no NAT), plus access rules on the outside interface such as   access...

Hi AllI've been banging my head for a day on this one - maybe its really simple but I've looked at it too much!!! I'm running a pair of ASA 5525-X on v9.1(1) of the ASA S/W and 7.1 of ASDMThis is the scenario that I needSERVERA has 3 IP addresses (bo...

host = Windows Server 2003 in DMZ ( 192.168.171.21 )I can ping it from my INSIDE network ( INSIDE = 192.168.172.0 )But I can't connect via UNC pathaccess-list dmz_access_in extended permit ip 192.168.171.21 255.255.255.0 192.168.172.0 255.255.255.0ac...

Hi,I am pretty sure that you can't do this in previous versions and don't think it has changed in version 9.X but though I would check in with the community before righting the idea off completely.We are an ISP that does Managed Services, I am lookin...

I would like to get some thoughts on best practice regarding joining 2 different networks in the same building.  2 different companys 2 different networks, we are merging. Once networks are joined we will trust the windows domains. Both networks are ...

I have a Cisco 5510 with an inside network, outside network and DMZ network.Right now, they are all able to communicate fine. But I have to add a another VLAN to the inside network, and have it be able to communicate with the DMZ and outside network....

Hi ,we have a asa that block some ip dresse with this reason ( Drop-reason:(no-adjacency ) No valid  adjacency ) and  when i check the log i found this message for the same blocked ip adresse  when they try to make dmvpn tunnel wyh the hub .Routing f...

Hi,We have deployed a Cisco NAC Agent in our network with GPO update... The deployment model is L3 OOB / Real IP Gateway.The issue is that, we need to put the IP address in each host manually to start communicating with Cisco NAC Manager.Is there any...

This is what I am seeing on the IDS (lots of these with lots of attackers - but always 0.0.0.0 for victime)evIdsAlert: eventId=6824202298114  vendor=Cisco  severity=high  alarmTraits=32768    originator:       hostId: TAMUK_IPS-9      appName: sensor...

Hi,I heard someone at TAC say that the reason there is a 9.0 code release and a 9.1 code releas--both current versions---for the 5515X is...9.0 is for ASAs without the CX module and 9.1 is for ASAs with the CX module.Then I've heard someone say...don...