Network Security

hi,i was wondering what does terminology "bump on the wire" means in transparent firewall,if I have 2 interfaces one connected to switch x “vlan 10” and another connected to switch y “vlan20” how does the asa in transparent mode forward traffic betwe...

Hello,I was informed by our security auditors that the http service on my asa outside interface is providing type details and is recommended to configure it to not disclose such detail. Not exactly sure what this means and the risk of having this on,...

Hi Everyone,I'm kind of a novice when it comes to Cisco configuration. I went to college for networking but haven't used it enough since graduating and I'm having some trouble with opening some ports for email to my home PC. Specifically i'm trying t...

I need to block 4000 nodes (Ultrasurf, TOR exit nodes) and I've written a script that will ssh and copy in these objects (prob 100 at a time) into an object group and then put a blanket deny.  I don't see a flood of traffic (occassional hits every ot...

Hi,Hope you can help .....I have setup a SIP Server behind a ASA firewall (inside interface). The SIP server talks to an external server (via the outside interface).* The ASA is configured to use static NAT. * INSPECT is setup for sip (global service...

Hi,  I am using Cisco ASA 5505 between my two network.1) I want 192.168.1.0/24 LAN user can go to access 172.16.1.0/24 network but 172.16.1.0/24 cant access 192.168.1.0/24 network2) what interface nameif will be or security Laval3)what access list sh...

Hi,    I have 2 ASA 5520 firewall configured with HA(Failover). but some time my primary firewall goes down standby firewall doesnt come active. i found below log from primary firewall..what is the reason & what is the mining of reason code of 4...No...

We have to enable FIPS 140-2 on our ASA5520's for all our IPSEC VPN connections.   We currently have failover on our 5520's. I found a lot of information out there but some seems to conflict one another.What are the things I need to look out for - ca...

Dear All,kindly assist with the basic configuration for setting up cisco ASA 5510 for NAT and DMZ.

Hi all, Is there anyway of blocking tcp trace packets that are being sent from outside interface to inside ? i have an application that is listening on port 80. Now its a requirement that hackers or unwanted users should not be able to send tcp trace...

Hello,I am trying to achieve the following in a lab environment (gns3) before moving to my real network.Multicast Source (inside network) --> PIX --> host router (outside network).The lab topology looks something like this:MulticastSource(router) fa0...

Hi,We have three Cisco ASA 5520 with 8.2 code in each tower. There are many configuration on the device hence we are using ip to Name to identify the naming conversion. Out of three one firewall naming conversion is not working, I mean after adding n...