Network Security

I'm very new to the concept of a firewalls. I'm attempting to block specific traffic from the internet into my router and allow only certain traffic out. Each representing the traffic flow. Example of the zone's and zone pairs would be. I'm confused ...

Dear Experts,Here in our organization , we have two IPS appliances 4260 and is configured with inline vlan pair mode.Cisco IPS IME is using for monitroing and managing there appliances. Recently i have added some of the blacklisted public IP addresse...

Hi! I have a question regarding transparent firewalls using BVIs.Based from the diagram above, ASA1 is in Transparent mode.Port Gi0 is assigned BVI-1 and port Gi1 is assigned BVI-2.Is it possible for network 1 to communicate with network 2 ?The traff...

Hi guys,We have an ASA 5510 firewall and in our DMZ we have a server listening on port 443. For this server, we already have a public IP address on the ISP' router. All the traffic to this IP address on port 443 is natted to the ASA's outside interfa...

Hi everyone,I am a newbie and i have to configure a default-factory firewall (ASA 5510) in a simple scenário like this image represents:At this moment i have configured the interfaces as represented above and at this moment what i want is grant acces...

Suddenly, without any clear reason, I cannot access the NME-IPS in my router.Instead it connects to the router console.The IP address is also pingable.Output:gateway#service-module IDS-Sensor 1/0 statusService Module is Cisco IDS-Sensor1/0Service Mod...

I recently did the following configuration changes on my ASA through ASDM. The changes were the following:Added a new service policy to the ASA inside interface to do some traffic policing. Also put the global policy rules in the inside policy.The bo...

Hi all.  Recently I came to learn through trying to configure my 891 router that when configuring the zone-baesd firewall to protect SSH access to the router from the Internet, you cannot use match protocol ssh in the class map and apply an inspect a...

We have asa connected via vpnSite 1 is liveSite 2 is in. StandbyWe  have a web site (asa public server) which is live in site 1. We need to  switch this to site 2, as the site 1 dc is shutting down. What we need  to do is redirect all traffic hitting...

hi,i am trying to setup a failover pair on Cisco asa 5520 - need a statefull failoverDo i need two ports dedicated to obtain the above - one for LAN based failover and one for statefull failver ? also do i need a switch in between to connect them ?co...

HI all,I am currently facing with an issue which relate to a false positive.if someone could help me out here I would greatly appreciate it.http://www.cisco.com/en/US/docs/security/asa/asa82/configuration/guide/conns_connlimits.html#wp1080774base on ...

Hi all,I have a similar situation to here: https://supportforums.cisco.com/thread/2048305But i am using a Cisco 1841 with subinterfaces instead (NAT on a stick).From the internet i can access services on public IP being hosted in LAN2. But when i try...