Network Security

I have a Production Router that is hosting 30+ IPSec Tunnels.  I have an ACL on the inside Interface of the Router to stop unwanted traffic from entering our LAN via the Tunnels.  The current ACL looks like this: access-list 145 deny   tcp 192.168.30...

Hi,I have a cluster with cisco 5550 asa's.I need to have mulpti new DMZ zones on our firewall, and since we already have 8 interfaces in use, I need to swap one interface from one DMZ to multiple DMZ's using subinterfaces...My question is now, what w...

I have enabled 100 of vlan interfaces in cisco. i assigned it under one phyiscal interface .What i require is all vlan should have internet connectivity , but no vlans should not have routing between each other, what s the best way to accomplish this...

Hi,yesterday i have upgraded my live asa to new version asa845-k8.bini read that a lot of bugs were fixed and some improvements with per user acls (need this feature).After upgrade (zero downtime - i have A/S environment) my CPU and Memory were down:...

We've been having a few problems over the past week or so which Objects and Object groups.What we have is an object group called HTTP out which contains around 120 objects and 10 object groups, this object group is part of a rule any source to HTTP o...

Running into a bit of a problem.  Anytime I try to download a large file through our 5510 the download fails at different points.  Cannot download via a download manger at all.  I see nothing in the logs which are set to infomational.I can connect my...

Hi,i have a ASA 5510 that gets the following error when trying to boot:-<0> kernel panic - not syncing: Attempted to kill init!Any Ideas?cheers              

I have a host on the outside i want to accessthe problem is ASA 5505 has somehow blocked traffic to this hosti can find nothing in the shun list and there is no ACL rule  stating that this specific host is blocked.Where else can i check to see if it'...

I have an SA520 that is being used as a front end firewall.  Behind it I have an IP PBX.  The VOIP provides are registered and I can make outgoing calls.  However It appears that the SA520 is either blocking or not routing the calls.  I have opened t...

How does one find the top user or IP accounting with this ASA5505 v7.22 device?With 1841 ISR:sh ip accountingsh ip flow topVery lame if they don't have similar commands or capabilities on the ASA series.                   

I am trying to troubleshoot an issue with a Shoretel IP Communicator server. I have an Iphone with the Shortel communicator client and on the ASA we have a NAT to the Shoretel server and an access-l on port 80, 5447 and 5449 (tcp)When connecting over...