Network Security

I am helping out a former colleague of mine on a project to migrate a single Checkpoint firewall over to a single ASA 5510, no VPN, just firewall.  The checkpoint firewall has 8 physical interface so the ASA 5510 also support physical 8 interfaces so...

I have been able to get EIGRP  working successfully in the lab like I want. Attached is the network overview:We have a Data Center and Corporate office connected via Point to Point Fiber link, eventually we will have two of theseTwo 4948E switches in...

Just seeing if someone can help me out with making sure I have the syntax correct and thought process down right on a solution to allowing guest wireless users access to an internal webserver.  (DMZ discussion aside)We have an ASA5510 with interfaces...

I have an FWSM in routed mode with 31 contexts and appear to be hitting a limit with VLAN interfaces (I've counted up and have around 115). If I add an interface to a context then name it with "nameif" the context stops passing traffic, removing with...

Will someone please explain what this NAT rules does?  I'm confused by what happens to the packet when you use "dynamic" and a host that is 0.0.0.0object network obj-0.0.0.0 host 0.0.0.0!object network ALL_ZEROS subnet 0.0.0.0 0.0.0.0 nat (inside,out...

I originally had the 5510 configured and working when the CheckPoint FW wasn't in the picture. We then decided to move the 5510 behind the CheckPoint FW so that we could configure the CheckPoint as the gateway using an ARIN IP address. Since moving i...

Hello,I have an issue from one of our branch office site that after spyware/grayware is updated the avira antivirus update on client PC is failed. When I have passed the traffic through the firewall instead of SSM module then it is successfully updat...

Hi All,I hope this is the correct location for this.Anyway, here's the situation I'm trying to configure several VLANs on my ASA to uniquely allocate to contexts, the VLANs will be trunked from my VSS.Unfortunately I'm not clear on how to achieve thi...

Hello all,I would like to know, if the signature version update (e.g. from 665 to 667) could affect tuned signatures.For an instance, if the severity or fidelity value is changed from default to tuned value prior the update.Does the update set the de...

Hi,I have a Cisco ASA 5505 device with basic (default) license, currently all my reirections, VPN's, VLAN's(3 Vlan's) etc are configured on the same and are working fine.Now i need to upgrade my basic license to "Security Plus" for some additional fe...

Hi Everyone, We are facing an issue for a while now and i do not figure out a solution yet. Basically we have different customers using the same 5510 firewall. We have created one sub interface for every customer on the inside interface. There are di...

I am currently testing Netflow accuracy on my Solarwinds platform. So I have been transferring a large file across an ASA 5520, which is set up to send Netflow data to out Solarwinds server.The problem is that the Netflow data does not show up on Sol...