Network Security

Hi,I have few question about FWSM configuration and best practices. 1. I have internal and external networks on both sides of FWSM. All the VLANs/IP/Ports that need to be filtered on both inside and outside are remote for FWSM and are only learned vi...

Hi there,I have an ASA 5520 with a DMZ with private addresses that I SNAT to my outside network. From inside the DMZ I can reach servers by both the internal private IP and the public IP, except if the IP is from the server trying to connect.So, say ...

            We have a failover ASA5520 pair with ASA-SSM-20 modules serving the website. The IPS module in the standby firewall crashes twice or thrice a week (Randomly-sometimes works fine for a month).I Opened TAC case and the engineer suggested to...

Hi,traffic redirects..

                   hi all,i have exchange with NLB cluster.i want to PAT the cluster ip to access email from outside.i know i can add the static arp entry for multicast cluster ip.my question is i can add static nat command to that same cluster ip fo...

Hi everyone...I have configure login block 1/2hr if anyone enter wrong password 3 times (cml), also I have applied quite-mode for local SSH (ACL applied), after the router block all incoming telnet or SSH from outside (WAN), I can access to the route...

I am taking my exam next week in my security class. We have to make a configuartion at home and then insert this config into the ASA5510 in class. I just need someone who has more experience than me to verify that my config is correct, any help or su...

Hi all,i am confused...please help.I have two router Cisco 887 with vpn site-to-site:Site A:crypto isakmp policy 1 encr 3des authentication pre-sharecrypto isakmp key ********* address 85.34.AAA.AAA   !crypto ipsec transform-set strong esp-3des esp-m...

Hi,I have a client with ASA 5525x code 8.6 failover bundle,this client have inside1, inside2,inside 3 and outside 1, outside 2, and outside 3. inside1 has to go out and come in  with outside 1 and inside 2 to outside 2 respectievely.please pass any i...

Hi guys,Okay my scenario, datacentre hosted system with 4 servers connected to a CISCO ASA5505, everything was working fine with 4x windows server 2003 machines but since pulling 2 out and replacing them with windows server 2008 machines i get a floo...

Dear Team,I am having ASA firewall 5520. I want to block yahoo mail, gmail using regex for particular users only.How to go about it?Thanks and Regards,Divya

Greetings,This is a question concerning EIGRP and static routes on our ASA Failover pair in an A/S configuration. The Active ASA is participating in an EIGRP AS and the Standby doesn’t receive any of the EIGRP routes, which, if I understand correctly...