Network Security

                   Hi,I am getting following maessage on my ASA %ASA-1-106021: Deny UDP reverse path check from 192.168.1.220 to 10.192.0.249 on interface inside.192.168.1.220 is not there in my network and I have enabled the RPF on ASA so it is obio...

Hi Experts,Please find the Network digram below. i want to deny internet access for some host in my network & other host should be access email ony what acces rule should be apply in ASA 5510.

Dear All,Can you confirm whether ASA 5512 can work as proxy server??RegardsBR                  

I have been trying to implement NAT on a Cisco 6500 today. It seems the issue I'm having is DNS related, as I can access wesites via IP address.  From inside the local network I can ping my DNS servers (66.28.0.45, 66.28.0.61) but web browsers timeou...

Hi My ASA5505 is not boot up. I did upload ios from rommon mode with tftp and tftpdnld.It is uploaded successfully after reboot it stopped at cisco logo sing. Use, duplication, or disclosure by the Government issubject to restrictions as set forth i...

Hi All, During the configuration of site to site tunnel, we have the below configs done;iam not sure  but there is a discrepancy in it for the crypto map identifier that is 5 from site a to site BDue to this there is intermittent connectivity loss fr...

Hello everybody,is there any clue to NAT PORTS when no nat-control is active "Enable traffic through the firewall without address translation"?thx in advanced alexxSorry I forgott, I uses a FWSM with 4.1(7). thx alexx

Does anybody know how to make the ASA report this VRRP traffic and an error?It's just a regular swicth (Juniper EX3300) sending VRRP traffic on the same VLAN and the ASA5510 inside port...And if md5 authentication is enabled on the VRRP switch then m...

Hi,We do have many default inspections in ASA firewall but wondering what all those mean? what each can do if configured & what can miss if not.can someone please help to understand the same  & guide if document of url details about samepolicy-map ty...

Friends                   In packet tracer fail, the traffic can get through, the unicast rpf is not dropping it.In packet tracer fail, looks like the return packet is DROPed because of uRPF.ASA1# show ip verify statistics interface OCODC: 0 unicast ...

Hi to everybody, I would like to know something with more accuration about idle timeout configuration.In particular why is impossible to set "half-closed connections"  to a value lower than 5 minutes neither through a policy-map? In my  particular sc...

I recently setup our Cisco 890 in zone firewall mode, rathern than the ACL method.I feel like I have most of this under control, however one specific area. I am trying to block some of our QA resources from ever reaching production, you know the deve...

Hi! The users have access to some servers through cisco vpn client. In ACL Manager I created the nesessary ACL and ACE and then I applied the ACL to the Group Policy for the users. The users now have access to some servers through cisco vpn client an...

Hi am trying the below configuration found on the internet  to stop teamviewer on cisco asa , but its not working , pls adjust the config to make a switable for workregex TV-RGX “\.teamviewer\.com”regex DG-RGX “\.dyngate\.com”class-map inspection_def...