Network Security

Hi there. I one question to all cisco IDS/IPS professionals. If the management port only accept inbound traffic how can I then activate my Cisco 4510 IPS appliance to get automatically signature updates from cisco.com ? That one requires outbound tra...

We have an ASA 5520 configured with Premium SSL VPN licenses. We've configured clientless and client based SSL VPN access. The VPN users are authenticated against a 2008 AD domain via a 2008 MS Radius server. My question is "can the users belong to a...

Hello,I'd like to update our current ASA appliances software version 8.2(2) and ASADM version 6.2(5) to the latest ones but we've heard that there is possible an issue between our current version with the latest one which would wipe out our current A...

Cisco says that by default IKE keepalive time is enabled in Cisco ASA. So what is the default lKE keepalive time in cisco ASA.

How can I set up or should I be setting up our core network to allow for failover between redundant nics on individual servers when using port security? When simulating a failover scenario, we will discover some of our ports in the err-disabled state...

                   Am I able to apply an ACL within the same DMZ to prevent one host from talking to another............in that same DMZ.DMZ X:172.17.1.1 is allowed to talk to the internet and to internal hosts BUT,Denied from talking to 172.17.3.3 w...

HiSo we wish to implement IPSec remote access vpn with the condition that employees should be able connect to this vpn only from company issued laptops and not from any other computers. I assume using client side certs is one of the ways to do it but...

Hi All,I have network assume 10.0.0.1/24. And on asa firewall i have created subinterface such as gi0/0 is divided into gi0/0.1 and gi0/0.2Now gi0/0 is connected to switch and made it as trunk where as gi0/0.1(nameif imp) is assigned vlan 2 and gi0/0...

Hi!There is something wrong with the ordering of our NAT-rules.We are running ASA Version 8.4(2)8 and the nat config is pasted below.I want outgoing smtp-traffic to be translated to xxx.yyy.zzz.18, but instead it's translated to xxx.yyy.zzz.20 (the o...