Network Security

Hi! I have a question regarding transparent firewalls using BVIs.Based from the diagram above, ASA1 is in Transparent mode.Port Gi0 is assigned BVI-1 and port Gi1 is assigned BVI-2.Is it possible for network 1 to communicate with network 2 ?The traff...

Hi guys,We have an ASA 5510 firewall and in our DMZ we have a server listening on port 443. For this server, we already have a public IP address on the ISP' router. All the traffic to this IP address on port 443 is natted to the ASA's outside interfa...

Hi everyone,I am a newbie and i have to configure a default-factory firewall (ASA 5510) in a simple scenário like this image represents:At this moment i have configured the interfaces as represented above and at this moment what i want is grant acces...

Suddenly, without any clear reason, I cannot access the NME-IPS in my router.Instead it connects to the router console.The IP address is also pingable.Output:gateway#service-module IDS-Sensor 1/0 statusService Module is Cisco IDS-Sensor1/0Service Mod...

I recently did the following configuration changes on my ASA through ASDM. The changes were the following:Added a new service policy to the ASA inside interface to do some traffic policing. Also put the global policy rules in the inside policy.The bo...

Hi all.  Recently I came to learn through trying to configure my 891 router that when configuring the zone-baesd firewall to protect SSH access to the router from the Internet, you cannot use match protocol ssh in the class map and apply an inspect a...

We have asa connected via vpnSite 1 is liveSite 2 is in. StandbyWe  have a web site (asa public server) which is live in site 1. We need to  switch this to site 2, as the site 1 dc is shutting down. What we need  to do is redirect all traffic hitting...

hi,i am trying to setup a failover pair on Cisco asa 5520 - need a statefull failoverDo i need two ports dedicated to obtain the above - one for LAN based failover and one for statefull failver ? also do i need a switch in between to connect them ?co...

HI all,I am currently facing with an issue which relate to a false positive.if someone could help me out here I would greatly appreciate it.http://www.cisco.com/en/US/docs/security/asa/asa82/configuration/guide/conns_connlimits.html#wp1080774base on ...

Hi all,I have a similar situation to here: https://supportforums.cisco.com/thread/2048305But i am using a Cisco 1841 with subinterfaces instead (NAT on a stick).From the internet i can access services on public IP being hosted in LAN2. But when i try...

Hi Everyonei hope someone could help im trying confiure our zone based firewall to use application inspection for RTP and RTCP for our mitel phone systembut i cant seem to find any support for it , i get the feeling that this isnt a straight forward ...

Hi,I am using ASA 5505.Below are my sh run.I am not able to ping my gatway i.e 182.73.131.89Please help------------------------------------------interface Ethernet0/0 description Internet Interface switchport access vlan 61!interface Ethernet0/1 desc...