Network Security

In ASA 8.2 in single-context routed mode I had multicast stub forwarding working with    igmp forward interface outsideon relevant inside interfaces with public-scoped IP addresses (no NAT), plus access rules on the outside interface such as   access...

Hi AllI've been banging my head for a day on this one - maybe its really simple but I've looked at it too much!!! I'm running a pair of ASA 5525-X on v9.1(1) of the ASA S/W and 7.1 of ASDMThis is the scenario that I needSERVERA has 3 IP addresses (bo...

host = Windows Server 2003 in DMZ ( 192.168.171.21 )I can ping it from my INSIDE network ( INSIDE = 192.168.172.0 )But I can't connect via UNC pathaccess-list dmz_access_in extended permit ip 192.168.171.21 255.255.255.0 192.168.172.0 255.255.255.0ac...

Hi,I am pretty sure that you can't do this in previous versions and don't think it has changed in version 9.X but though I would check in with the community before righting the idea off completely.We are an ISP that does Managed Services, I am lookin...

I would like to get some thoughts on best practice regarding joining 2 different networks in the same building.  2 different companys 2 different networks, we are merging. Once networks are joined we will trust the windows domains. Both networks are ...

I have a Cisco 5510 with an inside network, outside network and DMZ network.Right now, they are all able to communicate fine. But I have to add a another VLAN to the inside network, and have it be able to communicate with the DMZ and outside network....

Hi ,we have a asa that block some ip dresse with this reason ( Drop-reason:(no-adjacency ) No valid  adjacency ) and  when i check the log i found this message for the same blocked ip adresse  when they try to make dmvpn tunnel wyh the hub .Routing f...

Hi,We have deployed a Cisco NAC Agent in our network with GPO update... The deployment model is L3 OOB / Real IP Gateway.The issue is that, we need to put the IP address in each host manually to start communicating with Cisco NAC Manager.Is there any...

This is what I am seeing on the IDS (lots of these with lots of attackers - but always 0.0.0.0 for victime)evIdsAlert: eventId=6824202298114  vendor=Cisco  severity=high  alarmTraits=32768    originator:       hostId: TAMUK_IPS-9      appName: sensor...

Hi,I heard someone at TAC say that the reason there is a 9.0 code release and a 9.1 code releas--both current versions---for the 5515X is...9.0 is for ASAs without the CX module and 9.1 is for ASAs with the CX module.Then I've heard someone say...don...

Dear All,Need suggestion on ASA 5515-X High Availabilty Configuration, i want to configure our firewalls in high availability(Active/Standby). I configure the firewalls and below is the configuration of both Primary and Secondary firewalls.Primary fi...

Hi guys,Due to a complex setup on our Internet Edge network, I require a 'tcp-bypass' class map (bypassing TCP session state tracking) under the Global Policy on an Active/Standby ASA Pair.However...I now require FTP inspection in order to allow Pass...

Hi , I been able to access the firewall via ssh, but suddenly ssh got failed but able to telnet port 22 to the firewall. But it is not prompting username and password from the ASA device. So i have taken console reset all ssh configuration , then SSH...