Network Security

Hi Security Experts,In a very weird behavior, I see that ASA running 8.4(4)1 is not doing route-lookup and taking routing decisions just based on nat statements. I have a firewall running older 8.2(2)16 code as well and it does route-lookup before fo...

Hello, I have a question regarding policy static nat,lets suppose I have source 10.1.1.1/32 natted 20.1.1.1/32 with destination 30.0.0.0/8it means that 10.1.1.1 going to 30.0.0.0/8 will be natted 20.1.1.1 and 30.0.0.0/8 can reach 10.1.1.1/32 through ...

Hi Guys one of my customers asked the following about a limitation on the ASA5505I have a client that has a number of branch offices on a Gen-I OneOffice network. For complex and political reasons, we can’t trust all nodes on that OneOffice network. ...

                   Hi Guys, I just installed to ASA 5515 in my network and I'd like to have some training any good Book ?ThanksEdwin

I am new for configuring asa I want that my inside user only do browsing on internet and stop downloading any thingpls give me step by step configuration for this task I am using asa 5505 and a 1800 series router for internet connectivity and 2960 sw...

Hi there. I one question to all cisco IDS/IPS professionals. If the management port only accept inbound traffic how can I then activate my Cisco 4510 IPS appliance to get automatically signature updates from cisco.com ? That one requires outbound tra...

We have an ASA 5520 configured with Premium SSL VPN licenses. We've configured clientless and client based SSL VPN access. The VPN users are authenticated against a 2008 AD domain via a 2008 MS Radius server. My question is "can the users belong to a...

Hello,I'd like to update our current ASA appliances software version 8.2(2) and ASADM version 6.2(5) to the latest ones but we've heard that there is possible an issue between our current version with the latest one which would wipe out our current A...

Cisco says that by default IKE keepalive time is enabled in Cisco ASA. So what is the default lKE keepalive time in cisco ASA.

How can I set up or should I be setting up our core network to allow for failover between redundant nics on individual servers when using port security? When simulating a failover scenario, we will discover some of our ports in the err-disabled state...

                   Am I able to apply an ACL within the same DMZ to prevent one host from talking to another............in that same DMZ.DMZ X:172.17.1.1 is allowed to talk to the internet and to internal hosts BUT,Denied from talking to 172.17.3.3 w...

HiSo we wish to implement IPSec remote access vpn with the condition that employees should be able connect to this vpn only from company issued laptops and not from any other computers. I assume using client side certs is one of the ways to do it but...