Network Security

Hi,Can anyone suggest some options to gather traffic flow information for  a network to build new firewall rules. Some applications have been running for long time and people who set it up have moved. The Netflow data is huge. I am only interested in...

Scenario 1On new  firewall following inspect command are as follows.Assume there is no access-list on firewall..so now all the traffic related to below protocols will be allowed to flow from inside to outside as well as outside to inside. inspect dns...

Dear all,i have a problem with my asa phone proxyi have two ASA 5520  in HA. I have 10 phone register with ASA active primary.if i execute the command      show phone-proxy secure-sessioni can see the phone session on the ASA.if i perform the same co...

Referring to the diagram, Switch_2 was not there and communication between private networks was working fine. I added Switch_2 (a layer 2 switch) to the network to extend the business network and lost communication in Site_2 private network. We have ...

Hello all,I'm receiving this flood line like below in my log, look:Dec  3 16:05:00 10.11.2.2 %ASA-6-106015: Deny TCP (no connection) from 172.19.2.50/54429 to 10.11.5.20/5666 flags PSH ACK  on interface inside                   When I'm in 172.19.2.5...

I have a site to site VPN configured on a asa5505. The tunnel is up and the interesting traffic is successfully being encrypted. The issue is that when inbound traffic originating from a subnet outside of the encrypted range destin to the subnet with...

I am following the password reset procedure for the AIM-IPS module in a 2811 Router.I  enter the commnd "service-module ids-sensor 0/1 reset" after I  suspended a session, then i return to the session, but the only think  there is the username prompt...

Guys-  Question, If I have 2 Private IP Address and I want them to be NAT'd to the same IP address on the way out (specifically for 25 ports) - how can/is the correct way of doing this?This is what I am thinking, but I feel like I am wrong:Policy NAT...

Hello,   I am attempting to block outbound traffic for a specific PC on my LAN using the ASDM.. any advice is appreciated.   Thanks.

Hello everybody.We want migrate our network from pix515e to asa5520.Access rules is same on both devices.When we change default gateway from ip address pix to ip address asa, we get assimetric traffic and both devices drops tcp packets.On asa 5520 we...