Network Security

     I'm about to  upgrade from an ASA5520 to ASA5525, is there a best practices guide anyone know if I can follow for this project.             

I have a question that I have been working and can not seem to figure out. I have 2 ASA 5510's. Both have Internet service's from two different providers. On one I want to use for VPN access for remote users to connect through, the other I have a VPN...

Hi,my question is: Which default settings are done on a Cisco ASA and a CISCO ASR (with firewall IOS) against DDoS attacks?The Cisco ASR is configured as zone based firewall, which inspect all pakets. I read the article http://www.cisco.com/en/US/doc...

Hi guys,Got a strange problem I'm seeing on Cisco ASA firewalls.Scenario: Clients can access the Internet via PAT on ASA.Clients are on Wireless, they can happily surf the Internet connected to one APIssue is when they ROAM, they can roam get same IP...

I have a FWSM 4.1(8) with multiple contexts configured. In question here are 2 contexts with the same security level of 50. I have the "enable traffic between two or more contexts with same security level" unchecked...and i need to keep it that way. ...

                  I have a FWSM 4.1(8) with multiple contexts configured.  In question here are 2 contexts with the same security level of 50.  I have the "enable traffic between two or more contexts with same security level" unchecked...and i need t...

Dears,I have configured Ad Agent on member server and also able to pull the users from the Active Directory. But the command Show user-identity user active domain <domain> list detail is not showing any user to IP mapping.Kindly help me in this matte...

I would like to know the best solution for this three issues on my cisco devices (pix 515e, asa5510, sw 2960s) detected by the Security Metrics Vision Vulnerability Scan:1. SSL server accepts weak ciphers.2. SSL certificate is signed with weak hash f...

We have the following setup on our Cisco ASA version 8.6.1  One to one NAT rule from outside to our Exchange 2010 cluster IP address (DAG group). This is working fine for clientson the internet accessing their emails via Exchange using their phones. ...

Hi, I'm a CIsco ISR, not an ASA guy. Setting up my first ASA, which seems to be going well.I've setup an IPSEC VPN to a non Cisco device. And have connectivity between devices in each subnet.Subnet A - non Cisco - 10.10.13.0/24Subnet B - ASA 5505 - 1...

If I have a thousand nodes from the public each perform a UDP ping to a server behind the ASA, does each count as a concurrent connection?