Network Security

Hi,I want to ssh to my asa from internet.for it iahve done some configuration, but my asa is not pinging from internet.Below is my ASA's show runPlease help me..Regards,Milan Verma-------------------------------------------------------------RBN-ASA-0...

Thank you in advance.I have an application on a server in our DMZ that I want to restrict access to only allow it to send http request to www.google.com/recaptcha/api/verify.  I have been playing around with regular expressions and Inpect Maps, but s...

In Cisco ASA we can configure IP address from Supersubnet pool on two different VLAN as below.If you check 10.231.23.145 is IP address of Supersubnet of 10.231.23.128/27. Can any one know why this is allowed on Cisco ASA and same thing is not allowed...

Hi,I have few question about FWSM configuration and best practices. 1. I have internal and external networks on both sides of FWSM. All the VLANs/IP/Ports that need to be filtered on both inside and outside are remote for FWSM and are only learned vi...

Hi there,I have an ASA 5520 with a DMZ with private addresses that I SNAT to my outside network. From inside the DMZ I can reach servers by both the internal private IP and the public IP, except if the IP is from the server trying to connect.So, say ...

            We have a failover ASA5520 pair with ASA-SSM-20 modules serving the website. The IPS module in the standby firewall crashes twice or thrice a week (Randomly-sometimes works fine for a month).I Opened TAC case and the engineer suggested to...

Hi,traffic redirects..

                   hi all,i have exchange with NLB cluster.i want to PAT the cluster ip to access email from outside.i know i can add the static arp entry for multicast cluster ip.my question is i can add static nat command to that same cluster ip fo...

Hi everyone...I have configure login block 1/2hr if anyone enter wrong password 3 times (cml), also I have applied quite-mode for local SSH (ACL applied), after the router block all incoming telnet or SSH from outside (WAN), I can access to the route...

I am taking my exam next week in my security class. We have to make a configuartion at home and then insert this config into the ASA5510 in class. I just need someone who has more experience than me to verify that my config is correct, any help or su...

Hi all,i am confused...please help.I have two router Cisco 887 with vpn site-to-site:Site A:crypto isakmp policy 1 encr 3des authentication pre-sharecrypto isakmp key ********* address 85.34.AAA.AAA   !crypto ipsec transform-set strong esp-3des esp-m...