Network Security

Hi:I have to allow traffic from my DMZ into my LANI have created the following access list and will apply to DMZ interface:interface Ethernet0/1nameif insidesecurity-level 100ip address 192.168.200.1 255.255.255.0!interface Ethernet0/2nameif dmzsecur...

I've seen Cisco documentation recommendation transparent mode for firewall deployment in the data center, e.g. 5585X. I understand the key reasons for this are:- easy "insertion" of firewall in pre-existing network- speed (since there is no "hair-pin...

dear all :i am facing very urgent and critical DDOS on the port 80 on one of our webserversThe Case:•1- Too much traffic from too many different ips around the world asking the webserver on the HTTP(80)port which is opened to any one based on our req...

Hi all,Is it possible to NAT source & destination addresses (twice nat) on an ASA5520 running 7.2(5) ?

I seem to have all kinds of issues trying to manage my firewalls with ASDM. We have 4 ASA5510  firewalls we manage, three running ASDM 6.4 (3) and one with ASDM 6.3(2) .I am using a Windows 7 VM When I go to the ASDM launcher (1.5(50)) and enter my ...

Hi All,Please help me how cisco security manger is managing logs from different devices.For example cisco security manager can manage FWSM, ASA, IPS devices.Does it stores  logs from this devices into some central location where CSM is being installe...

I have a requirements for the following but not sure if its possiblePPoE on the WAN - picks up an IP from the ISP then private behind - NATed - this is no issues.But the connection also comes with an additional 5 IPs public IPs.  Traditionally I woul...

Hi All,Faced an dos attack from lan inside zone to Dmz zone.AS from firewall logs came to know about the one of the server wasbroadcasting.It took long time to findout that particular server.So is there any tool that gives clear picture in terms of g...

I enable signature 2000 for testing for request block connection on ASA. But it isn't work. Device login profile and connection between ASA and AIP-SSM are correct. I see the following error in Event Viewer:evError: eventId=1297944335862322485  vendo...

Hi there,I've got a little problem with my ASA 5515-X after upgrade from version 8.6 to 9.1.I've got two 5515-X in A/S-mode and upgraded both as described on cisco's website (first standby-unit, failover, etc.). Everything worked just fine except pin...

Is there a way to have the ASA back up to a TFTP automatically, like daily or weekly?                  

Hello!!I have cisco ASA 5510 with basic configuration (default policies). The problem is that windows XP users are unable to send emails form MS outlook and unable to log on to Hotmail , Gmail or any mailing site. While windows 7 and 8 users are not ...

                   I set the dhcp server on inside interface, and did PAT for any inside addresses to outside interface.From any inside hosts as dhcp client, I can't access Internet.  But on the same host, when I manually set private IP, I can access...