Network Security

I have an ASA 5505 running 8.4.I am only letting ICMP traffic in from the outside.As a test, I opened a couple of ports I need on the ASA.I cannot access these ports and I do not get a denied error in the log.I contacted the ISP and they are not bloc...

I've been searching the web trying to find some answers regarding best practices when it comes to ASA Active/passive failover with OSPF.We have pairs of 5520s and 5540s connected to pairs of nexus 7ks and 6500 switches.  The ASAs plug into switchport...

CSM 4.3 came out without much noise or attention. I spent a lot of time with the demo at CiscoLive and IMO this version is a game changer and can compete with anything out there...why so quiet?

My understanding is for insight to outside we need global and NAT, and for outside to inside we need static and ACL, is that right guys? Traffic goes to high to low, I'm just start working with 5505 recently.Sent from Cisco Technical Support iPhone A...

How can i detect low and slow data exfiltration with the Cisco IPS?                 

On the ASA, an inbound access-list controls traffic coming into an interface, aka ingress traffic.So if I have an Internet-facing interface (outside) with security 0, and I wanted to control inbound traffic through this interface to internal hosts (o...

I can do VPN remote access configuration by using cisco firewall also I can do it using the cisco router by using the SDM program so what is the benefits from using the firewall or all of them are the same?I mean it's recommended to use the firewill?...

I have 2 sites. HQ and Colo. I want to deploy BGP at both sites and announce the same IPV4 space and AS number at both sites. Behind the BGP routers I want to put one ASA at each site and run them as active/standby. I have a layer 2 connection betwee...

Hello everyone,My outside interface on ASA firewall suddenly came down:Interface Ethernet0/0 "outside", is down, line protocol is downcould someone help me with the posible reasons that could cause this? I am remotely connected to it.Thanks so much.

Cisco Systems is pleased to announce the availability of its 7.1(3) E4 service pack for Intrusion Prevention Systems (IPS). This release delivers new features and critical fixes. A subset of the new features includes extended support for Radius along...

I have a Cisco ASA 5520 that I'd like to be able to connect directly to our gigabit fiber connection (we're currently connected through a media converter that's causing problems).  I've found the following:Cisco ASA 5500 Series 4 Port Gigabit Etherne...

Hello everybody,i have to replace our zywall with an 5520 asa.the following configuration:outside-ip: 82.218.6.10/255.255.255.255default route 82.218.6.254inside-ip: 10.0.1.201/255.255.0.0  dhcp 10.0.5.1-10.0.5.100wlan-ip: 192.168.0.1/255.255.255.0  ...

Hi all. I would like to know what are the major differences between firewall and router since a router can also configure accesslists to protect the internal network. One difference i know is that a router is not stateful hence you need to specify yo...