Network Security

Existing nework New NetworkHi all,I have attached some diagram here,2911 Router configured as a zone based firewall and it works fine.I need to put ASA 5510 as an internal Firewall in to the existing network.So I need to hand-over the NATing configur...

Hi,We need to have one connection with less internet bandwidth assigned to it than all other other connections. Basically it is a separate conection from all others, incomming just from one switch port and separate VLANI know this can be done on the ...

I am not able to get to the internet from my DMZ ip address.Here is my config.interface Ethernet0/0 switchport access vlan 2!interface Ethernet0/1!interface Ethernet0/2!interface Ethernet0/3!interface Ethernet0/4!interface Ethernet0/5 switchport acce...

I have several interfaces:outsideinside(192.168.0.0/24)wifi(192.168.101.0/24)haklab(10.10.10.0/24)Currently I have remote access anyconnect users who are able to VPN in and get access to the outside internet and inside devices.I am trying to add anot...

I have a FWSM cluster that I exceeded the maximum number of static nat entries on.  i migrated the connectivity off to a pair of PIX 535's that seem to be handling the adderess translation needs.  however the number of NAT entries being required is i...

Hi all,I want to know the best way to check failover in ASA environment ? I wanted to know if I can stop an ASA CONTEXT to force failover ?or any other way .Thanks

         Hi Guys,I am facing high CPU util on my pix 515 E which is in failover mode.During peak hours the util is see rising to 60% where as in off peak hours it is normally12%.During normal operation the average utilisation was observed to be 30% b...

Hi allDo anyone of you know of a tool that can accept a list of ip-addresses and spit out their origin.BackgroundI have a list of addresses that have scanned and attacked a target over night.I wish to show what good use we have of our firewalls and w...

We have several user subnets that we want to start securing but no one knows all the ports and such that are currently in use. We dont have the time to open everthing up one by one over the next month or so. We have put a permit any any log and have ...

Hello,How to secure vlans on Catalyst 6500 by using Cisco ASA Firewalls?There are no free modules on Catalyst 6500 to install a FWSM module.What is the best configuration to secure vlans (~80 vlans) by using cisco ASA firewalls (context, hairpining.....

Hi Folks, We have a secondary FWSM which has 50 Contexts, while the primary one has 100 Context. so the failover is not working. Is there away to downgrade the first one to 50 Context without paying extra cost. I mean I want to do the reverese thing ...

                   I have an ASA-5520 with a IPS-SSM-40. I configured the IPS control port to an ip address on the ASA's inside network subnet and connected it to the same switch as the ASA's inside port is connected to. I am using a single context. ...

Hi,I'm setting up a new IPS sensor on an ASA 5500.I've heard a recommendation that for a new sensor implementation at a given site, it is better to allow the sensor to learn traffic patterns in promiscous mode before deploying inline mode, otherwise ...