Network Security

             I have a Guest wireless interface that is being overloaded with clients accesing the x.dal.llnw.net sites.(Limeware and other Akimia locations).  I do have a traffic policy on the interface limiting traffic to 3mb in/out.  Is there a way...

Hi!I want to open some ports for one specific host on the inside network. I want the host to be able to call out to any host on the internet. What is the easiest way to do this?I have many public IP adresses so the inside host can easily be Natted wi...

Hi, I have IPS inline with Signature version 547.i want to update this signature and i dont want to affect the running enviroment ( since it is inline)my question is if i upgarde it, will it affect the organization ( i.e may new signature will block ...

Hello, everyone, i am writing you for help me.I Have this Topology: R1 is as server and i want to public that server in INTERNET using public IP 7.7.7.7, but i can not do that. I tried to do a NAT but it just translate from DMZ to Outside, however i ...

I know it is a stupid question.I say the answer is ten.  That means ten hosts can be behind the firewall and hit the internet.  The eleventh doesn't get to go out.I'm being told by a coworker that the "10" in the part number refers to the number of I...

Hello Experts,We have our Production Servers placed at ISP DC where we are using Cisco ASA firewall model 5505 and all the servers placed behind the firewall.The bandwidth we have 100 MBPS and there is no IPS device in between. Since long time, we ha...

I am working on locking down the ASA and I am looking for the commands to set the number of failed authentications before it won't accept login attempts from that host.  I found a single command to set the max times but what about the max duration or...

Hi All,The situation is as follows:I have an interface on the my ASA dedicated for unmanged devices that can get to the internet only.  no access to any other networks behind the ASA. These users want to use our mail server on the network but they us...

Im looking at the IPS modules at the moment that seem to have an ongoing issue of the Analysis Engine crashing. This runs as a process called sensorApp located in /usr/cids/idsroot/bin/When its originally launched it runs without problem using a -z s...

Hello Experts,We  have our Production Servers placed at ISP DC where we are using Cisco  ASA firewall model 5505 and all the servers placed behind the  firewall.The bandwidth we have 100 MBPS and there is no IPS device in  between. Since  long time, ...

Hi,I'm trying to use qos to police traffic where a certain host should not go above 5Mpbs at any time and if the traffic is exceded it should be dropped.I have trying to play around with the below but the host machine can still access the full bandwi...

I feel this is a fairly easy straight forward problem. I have a NAT translation from inside,outside and it's to translate 449 to 443, translation is working great and this is all this public IP is used for. Problem is the device on the other end need...