Network Security

We are a small ISP and I would like to move our dhcp server inside our firewall and only allow dhcp and icmp to the server. It appears that when I allow it through the access-list and NAT that the requests get to the server and the server offers an I...

Hi all,I have been remotely trying to troubleshoot a site that i just inherited that is running a Pix501, version 6.0(1).  I'm not allowed to gain access to the machines on the network, nor the pix itself for remote access  so I can't test anything. ...

I have a Web server in my DMZ. Periodically the server sends traffic with source tcp/80 and a random destination tcp port. Is this normal?

I've been tasked with implementing a godaddy wildcard ssl certificate on a new ASA based VPN cluster.  This is replacing our legacy individual certs and is a great way to go.  The issue is I've tried just about everything I can and read so many appro...

Just a quick question regarding dhcp: is there a way to include a space in an option?I need to add thisDhcpd option 130 ASCII Mitel Ip phoneBut it errors out on Ip. Wondering if its doable or if I need to move the scope to a windows server. I thought...

Hi all,I have a running ASA5520 in my network and recently we plan to add a failover pair as a standby unit for the running asa. Both of the ASA have the same specs and software. the only thing that the soon to be secondary ASA does not have is the A...

Hello everybody!Can someone provide documents about IPS performance on 29xx and 39xx routers?I need data for both IOS and NME IPS's.Thanks for your help!

Hi,I am facing problem in implemnting NAT on cisco 8.4the senerio is Inside interface network 10.10.10.0/24 and 10.118.0.0/16 is also routed towards inside networkOther network 192.168.10.0/24 is routed via outside interface.My requirement is to NAT ...

Hi,What is the largest ACL (actually object group of networks) I can use on a 5510?I'm blocking traffic to/from certain countries. I have one that is about 4,000 lines long that works fine but would like to add others and not sure what the upper limi...

My name is Taibo from Mozambique is my firt time here in this forum.My experience with cisco is MediumI am about to setup a SSL VPN, and the goal is to have centralized authentication with rsa key using OTP.Can any one recomend me best practiceRegard...

I need to open a specified port on an ASA 5520 8.2 which will allow 2 ip addresses  access to databases over a vpn?...pleae advise, thx!!

hi all,i'm new to asa, so i'm starting my configuration and i created a test environment side by side with my production.  i just run startup config and connected my ad-test.com AD host to it. i can ping ad-test.com from console, ok.  but it can't ge...