Network Security

Hi,I am working on ASA and TMG proxy server design and need your expert advice. The setup is                               <TMG>                                   ||<Internet><ASA><CORE SW><LAN/WLAN>                    |               <DMZ>I am placi...

Hi Everyone,I have my webserver (30.30.30.50) located at DMZ zone. The public IP of my webserver is (119.2.116.191). From outside i can ping my webserver using public IP thats fine.The issue out here is, if i want to ping my webserver using public IP...

I'm trying to block access to dropbox.com on our ASA5510. I have it setup and it blocks dropbox.com just fine. But it is also blocking google.com. I can't figure out why. Here's my config. When it blocks google, it blocks it with the terminated by in...

I have DSL service with AT&T and I have a Motorola 3360 modem.  We also have a /28 network of static IPs from AT&T.  When I login using PPPoE on the modem it gets x.x.x.190 as it's address.  Our range is 177-190.  I have two ASA 5510s in an active/pa...

Hi I'm installing a new pack of signature on my IOS Firewall. This is what I'm doing1.- Upload the .pak file on the flash memory.2.- Install the package with the command copy flash:IPS/IOS-S636-CLI.pkg idconf but when the insallation finish it doesn'...

We tested Nessus against our legal IP range, and although the firewalls see the connections and happily deny then, the IPS 4255's (two, in series, running 7.1.6 and 7.0.7 E4 respectively) aren't logging anything on the source IP, not even in the info...

All,I inherited an ASA 5510 and have very limited experience with ACLs.  There are two main problems I'm running into:1. We have a multifunction device that sends scans as email but they never go out.  I attempted to make an access list to allow SMTP...

Hello, I recently upgraded my asa from 8.2 to 9.1 (reconfigured from scratch - didnot convert old config) and everything seems to be working fine except for communication between my INTERNAL network and my DMZ.  Any help would be greatly appreciated....

My internal network consists of Catalyst 3750 switches segmented into different VLANs.  There is a default route on the layer 3 Catalyst switch sending all unknown traffice to the inside Internet of the ASA 5510.  However, I'd like to have a separate...

Hi,I'd like to see some REAL LIFE comparisons of ASA firewall throughput (a bit like this one for ISR G2 Routers - http://www.anticisco.ru/pubs/ISR_G2_Perfomance.pdf).The reason I ask is that I recently upgraded a firewall from an ASA5505 to an ASA55...