Network Security

Packet flow on ASA 8.3 changed ?In Earlier version 8.2 we used to put permit statment on mapped interface however in OS starting 8.3 access-list entries should have real address .ExampleLan Server/Real ( 192.168.1.2 )Outside IP/Mapped ( 202.202.202.2...

Hi All,We heard that ASA ver 8.4 has PBR. Do we have some guidelines on how to configure PBR for ASA and can it do routing based on URL?Thanks!

Existing nework New NetworkHi all,I have attached some diagram here,2911 Router configured as a zone based firewall and it works fine.I need to put ASA 5510 as an internal Firewall in to the existing network.So I need to hand-over the NATing configur...

Hi,We need to have one connection with less internet bandwidth assigned to it than all other other connections. Basically it is a separate conection from all others, incomming just from one switch port and separate VLANI know this can be done on the ...

I am not able to get to the internet from my DMZ ip address.Here is my config.interface Ethernet0/0 switchport access vlan 2!interface Ethernet0/1!interface Ethernet0/2!interface Ethernet0/3!interface Ethernet0/4!interface Ethernet0/5 switchport acce...

I have several interfaces:outsideinside(192.168.0.0/24)wifi(192.168.101.0/24)haklab(10.10.10.0/24)Currently I have remote access anyconnect users who are able to VPN in and get access to the outside internet and inside devices.I am trying to add anot...

I have a FWSM cluster that I exceeded the maximum number of static nat entries on.  i migrated the connectivity off to a pair of PIX 535's that seem to be handling the adderess translation needs.  however the number of NAT entries being required is i...

Hi all,I want to know the best way to check failover in ASA environment ? I wanted to know if I can stop an ASA CONTEXT to force failover ?or any other way .Thanks

         Hi Guys,I am facing high CPU util on my pix 515 E which is in failover mode.During peak hours the util is see rising to 60% where as in off peak hours it is normally12%.During normal operation the average utilisation was observed to be 30% b...

Hi allDo anyone of you know of a tool that can accept a list of ip-addresses and spit out their origin.BackgroundI have a list of addresses that have scanned and attacked a target over night.I wish to show what good use we have of our firewalls and w...

We have several user subnets that we want to start securing but no one knows all the ports and such that are currently in use. We dont have the time to open everthing up one by one over the next month or so. We have put a permit any any log and have ...

Hello,How to secure vlans on Catalyst 6500 by using Cisco ASA Firewalls?There are no free modules on Catalyst 6500 to install a FWSM module.What is the best configuration to secure vlans (~80 vlans) by using cisco ASA firewalls (context, hairpining.....