Network Security

Dear Experts,Im using ASA NATing INSIDE traffic initial out to OUTSIDE. But specility is, I have INSIDE 17 Server mapped with OUTSIDE 64 Real global IP.Wanted NATTed methode is ROUND ROBIN on outside 64 IP. From my understanding the LOWEST IP which a...

Hi all,I hava ASA5510. INSIDE,DMZ and OUTSIDE interfaces are configured. I hava web server on DMZ ip:10.0.0.1 and it is static natted to 1.1.1.1.From internet i can reach to web server with IP:1.1.1.1 and from INSIDE connect to web server with IP:10....

I have an ASA 5505 running 8.4.4.1.  I've configured three WAN interfaces and have assigned failover on one of them (we have two ISP's, and a total of 3 static IP's in 3 different subnets).  I've noticed that all the traffic is flowing through only o...

                   HiI want to know how many ACLs we have on all firewall .Any way via Query  or RME to count this for all firewall at once ? It did not find any way e.g. to export all FW configuration with the RME  at once and to count the ACLs with...

Hi Robert,Would you be able to elaborate on scenarios where vlan-groups are needed instead of inline-vlan-pairs? There doesn't seem to be much documentation out there explaining this.Thanks in advance

セキュリティ製品を初めてオペレーションしています。初歩的な質問で申し訳ありません。VLANで、内部ネットワーク（VLAN２）、外部ネットワーク（VLAN1）の２つのネットワークを設定し、ぞれぞれのVLANから、疎通確認を行っています。外部ネットワークは、上位ルータと接続し、疎通確認（PingはOK）問題ありません。内部ネットワークは、内部でPCを接続し疎通確認（PingはOK）問題ありません。内部ネットワークから、外部ネットワークを経由して、上位ルータとの接続を行いたいと考えています。最終目的は...

I have a unique situation where I have the following inside network being translated to an outside public IPso nat (inside) 1 192.168.10.0 255.255.255.0      global (outside) 1 207.x.x.3This works great, however I need one of those inside hosts (192....

Hello,I have a doubt about which mac-address should I give to the ISP.The documentation says the mac used by the asa is the burnet-in mac. See bellow.I gave to the isp2 the burned-in mac address, but they said that do not see any traffic.To test the ...

We recently added about 400 users to our network for a total of 1000.  Looking at the ASDM we are holding very tight to 75% utilization and we have 256mbs.  This is also running IOS 8.2(1).  Our firewall recently crashed after a major download was fo...

Hi, all.Using IPS S661 and 7.0.7(E4) and AIP-SSM in a few locations, most if not all of the signatures for attacker and victim are completely backwards.Should I have turned the IPS on in an active mode it would have shunned critical infrastructure ho...