Network Security

Hi,My network x.x.x.x/22 is basically connected to the data center over a point to point WAN link through routers.One of my inside host x.x.x.150/22 require direct internet access as a part of business requirement.I have a dedictaed 100Mbps ADSL line...

I have 2 * ASA5515-IPS-K9 that were purchased last year and were configured as 2 separate firewalls and IPS modules. Although there were some initial teething problems with the IPS's being able to communicate the Internet for signature updates, this ...

Hi,I'm using ASA 5510 and I wondered if we can configure reporting to know the traffic on each interface,the attaks,the vpn connection during a period ( 1 week or 1 month).For the moment, we can see these logs only in 'real time' .Thank you

Hi everyone!Currently, we are monitoring a Cisco ASA which is running Software version 8.4(4).1. It is showing high cpu load (reaching 90%) at some hours, and our client (who is the owner) has asked us to troubleshoot this issue, since this is not a ...

Hi,We are having an ASA running on 8.2We are planning for natting three /16 subnets with one /24 public IP pool.global (outside) 10 88.88.88.1 - 88.88.88.254nat (inside) 10 172.16.0.0 255.255.0.0nat (inside) 10 172.17.0.0 255.255.0.0nat (inside) 10 1...

Hello,I have been seeing this concept of Twice NAT on cisco devices and Double NAT on Checkpoint devices. Somehow I am not able to understand how they work. Are they the same? Could anyone please explain whaht these concepts actually achieve? I am ma...

hi all,can a cisco 2960s connect to asa with multiple vlans and still route to DMZ and internet?thanks for any comment you may add.

So I'm feeling a bit red faced here as this morning I had a student come in and show me how a product called HotSpot Shield absolutely blows past every type of web filtering, packet shaping , and firewalling I have so carefully set up over the last 5...

All my attackers IP addresses are from my inside network. I never have an external IP show up as an attacker, its all internal. Then the victims are showing external IP addresses. Shouldn't it be the other way around, most of the time.

Dear All,I have a problem with the configuration of the ACL of my ASA 5505 router. However, the syntax seems okayaccess-list 121 extended deny icmp 192.168.0.0 255.255.255.0 anyThanks for your help

Hi, any help on this would be much appreciated.  I have an ASA 5505 with interfaces inside, outisde, dmz.  I have a site-to-site vpn tunnel set up to another site for my dmz clients.  The tunnel is working just fine.However, my dmz clients need to co...

Hello,I am having a question about the optimal firewall configuration to choose.This is a firewall that would be between an Office Network and a Manufacturing network, with a DMZ.Just as in the attached picture that is from the (Cisco) Converged Plan...