Network Security

I am trying to configure netflow export on Cisco ASA firewalls.I have done config and I can also see some packets exported to fluke. However I am not seeing any data on fluke. Is fluke a supported exporter for cisco ASA firewalls?I found this doc and...

Hi, all!several organizations wants to place their equipment and servers in my datacenter. They want to use the same resource - 10.3.1.5. I want to connect their servers and VPN-gates via my CISCO ASA 5510. When the organization was the only on ASA w...

HiIf i want to do some session limit to dest addressLet say that i have 1milion hosts that need to get my DHCP server after electricity issue and i want to limit the sessions to the DHCP for 3000 req per sec to help my server to stay a lifeSent from ...

Hi,I have created a Cisoc IOS Zone based firewall on my cisco 3945 router. I have an issue receiving any returning traffic. Here is a simplified version of my issue.I have two zone pairs: Internal to Outside and Outside to Internal.In the zone pair O...

Hi,I am facing a problem with the ASA. I have one of my internal hosts hide NATed to go directly to the internet. I have a policy and NAT created on the inside interface and I can see that NAT is happening in the Xlate table. Also, in the logs the tr...

i have asa901-k8.bin" in my asa firewall and  downlaod liecnce from cisco,now i dont know how to allow internet to my user.?please help me i am in urgent condition.Thanks in advanced.

Hello Friends!Is this supported yet on the ASA?  I want to be able to have radius assign privilege levels to firewall cli administrators.Upon login, I'd like them to be immediately be placed into "enabled mode" (without needing to know the local enab...

I have an ASA 5510 deployed and we are getting a tonne of port scanning traffic (who isn't these days) and ping traffic.The threat scanning thresholds seem a bit too high and was wondering if there is a way to use a Service Policy Rule to perform a S...

Hello.What do you use or recommend to use on your ASA ? I've used for a long time, Per-Interface ACL but now global ACL are available.But what are the advantages of having everything in one ACL ? What do you recommend ?Thank you.Best Regards,Mathieu ...

Is there a simple way to block ip addresses by foreign countries? There is so many network addresses needs to be blocked, it seems it is not practical on the ASA. Can someone give me some suggestions on this?