Network Security

I have 2 sites. HQ and Colo. I want to deploy BGP at both sites and announce the same IPV4 space and AS number at both sites. Behind the BGP routers I want to put one ASA at each site and run them as active/standby. I have a layer 2 connection betwee...

Hello everyone,My outside interface on ASA firewall suddenly came down:Interface Ethernet0/0 "outside", is down, line protocol is downcould someone help me with the posible reasons that could cause this? I am remotely connected to it.Thanks so much.

Cisco Systems is pleased to announce the availability of its 7.1(3) E4 service pack for Intrusion Prevention Systems (IPS). This release delivers new features and critical fixes. A subset of the new features includes extended support for Radius along...

I have a Cisco ASA 5520 that I'd like to be able to connect directly to our gigabit fiber connection (we're currently connected through a media converter that's causing problems).  I've found the following:Cisco ASA 5500 Series 4 Port Gigabit Etherne...

Hello everybody,i have to replace our zywall with an 5520 asa.the following configuration:outside-ip: 82.218.6.10/255.255.255.255default route 82.218.6.254inside-ip: 10.0.1.201/255.255.0.0  dhcp 10.0.5.1-10.0.5.100wlan-ip: 192.168.0.1/255.255.255.0  ...

Hi all. I would like to know what are the major differences between firewall and router since a router can also configure accesslists to protect the internal network. One difference i know is that a router is not stateful hence you need to specify yo...

Hi all, I need some help I have 2 cisco routers that resired on the same interface on Cisco ASA. For security reasons, on both of the routers I have configured default gateway to be ASA interface, then static route between them on the ASA, I get the ...

gusy just want to check the DNS server attached to the firewall can i tried to telnet to port 53 on a roiuter just to see if the remote firewall alllows the conection.......telnet is tcp and DNS is udp based will it work thanks

Hi guys,I have to allow the ESMTP traffic from a defined IP address. I know that the following statement allows me to disable the inspection but I would do more, limiting the "no inspect esmtp" to a single IP address.conf tpolicy-map global_policy  c...

Hi,We have uprade our IPS 4270-20 appliances (10) to new version of 7.1.(4)E4, after upgrade we see that out of 4 CPUs, 3 CPUs shows are 100% (CPU 1, 3,4).However when we check the inspection load its less than 40-50%. Looks like this may be a bug bu...

I have a brand new out of the box ASA5505.  I can connect with https://192.168.1.1 and login with blank username/passwordFrom there I get a screen that tells me I can either- Install ASDM Launcher and run ASDM or- Install Java Web StartIf I choose th...