Network Security

Hello.What do you use or recommend to use on your ASA ? I've used for a long time, Per-Interface ACL but now global ACL are available.But what are the advantages of having everything in one ACL ? What do you recommend ?Thank you.Best Regards,Mathieu ...

Is there a simple way to block ip addresses by foreign countries? There is so many network addresses needs to be blocked, it seems it is not practical on the ASA. Can someone give me some suggestions on this?

Dear Team,I have SA540 firewall with me, I am trying to enable a site-to-site VPN between Fortigate 50B and SA540. I am facing issues with the setup. Please say if any license is required for bringing uo the site to site IPSEC tunnel.Please find the ...

I am trying to connect to shared folder over the internet-using netbios. The traffic will be going from inside to outside. When I try to connect from windows client I get error 1920. Can anyone shed some light on how to create access lists to enable ...

Hi!Got a case from a customer. They want me to open some ports so that one client can use some applications.The problem is, I am not sure on which interface i should open the ports. The customer have about 10 interfaces on the ASA. It's a client on t...

Hi thereSorry about this stupid question, but CISCO has just too many licenses, codes, contract/serial #...Each client needs a VPN client software installed.This would be the "CISCO AnyConnect VPN Client", right?It is the same for SSL and for IPSec?I...

Hello all,I found that on older IPS IOS 5 is possible to inherit previously tuned signatures settings even if new signature update pack from Cisco is downloaded.Descriptipon of that how-to is available here.I'd like to know, if the same feature is av...

Hi, i have webserver and i want to block scan for website using IPS ( any type of scan which reveals server infomoration).Is there any signature used, if not can i create custom signature (how i can do it)thankssssssssssss                  

Hello everybody.I migrate from PIX515E(8.0.4) to ASA5520(8.4.5)I have this configuration on PIX515Estatic (ins10,INTERNET) tcp 10.1.15.5 5555 access-list POS_vpn_nsaccess-list POS_vpn_ns extended permit tcp host 10.1.21.6 eq 5555 192.168.0.0 255.255....

I have a TAC on this, but thought I would throw it out here too.  We recently upgraded a 5520 to 8.4 code so HTTPS traffic can filter through the CSC. Well, it caused a major headache now in that it takes several attempts to pull up any https pages. ...

Dear forum,For some reason there are some sites that I cannot access websites from inside interface.One such example is lxer.com where I am receiving this message in the browser:The connection has timed out          The server at www.lxer.com is taki...

Hello all I am having a hell of a time with a NAT rule I am trying to set up for a webserver I want to place into my DMZ. I have created a NAT rule and added the appropriate access rules but I am still unable to hit my webserver from the internet.I d...

Hi.I have a Cisco 5510 which has remote access VPN configured.Now I have new block of IP address, is there a way I can just change the outside interface IP so that people can remote in without doing anythng else?Or if I coulds be taught to create a n...