Network Security

hi,     i am trying to achieve the following and wonder if it's possible and if so, how to do it.      we have an internal LAN of 192.168.101.0/24. we have two WAN/outside connections & interfaces, lets say 1.1.1.0 & 2.2.2.0.      all internal traffi...

Hi,I'm trying to get an asa5505 set up so that our web server can send an LDAPS login to a client's server and receive the request back. The default IP our traffic goes out on is different than where I want the connection to come back in on. So, I se...

Hi , I had an issue on testing the failover when only one interface in active unit fails. The configuration guide mention that by default, single interface failure can trigger failover, however,it didn't work during my testing. instead, two interface...

I have an ASA 5505 running 8.4.I am only letting ICMP traffic in from the outside.As a test, I opened a couple of ports I need on the ASA.I cannot access these ports and I do not get a denied error in the log.I contacted the ISP and they are not bloc...

I've been searching the web trying to find some answers regarding best practices when it comes to ASA Active/passive failover with OSPF.We have pairs of 5520s and 5540s connected to pairs of nexus 7ks and 6500 switches.  The ASAs plug into switchport...

CSM 4.3 came out without much noise or attention. I spent a lot of time with the demo at CiscoLive and IMO this version is a game changer and can compete with anything out there...why so quiet?

My understanding is for insight to outside we need global and NAT, and for outside to inside we need static and ACL, is that right guys? Traffic goes to high to low, I'm just start working with 5505 recently.Sent from Cisco Technical Support iPhone A...

How can i detect low and slow data exfiltration with the Cisco IPS?                 

On the ASA, an inbound access-list controls traffic coming into an interface, aka ingress traffic.So if I have an Internet-facing interface (outside) with security 0, and I wanted to control inbound traffic through this interface to internal hosts (o...

I can do VPN remote access configuration by using cisco firewall also I can do it using the cisco router by using the SDM program so what is the benefits from using the firewall or all of them are the same?I mean it's recommended to use the firewill?...

I have 2 sites. HQ and Colo. I want to deploy BGP at both sites and announce the same IPV4 space and AS number at both sites. Behind the BGP routers I want to put one ASA at each site and run them as active/standby. I have a layer 2 connection betwee...

Hello everyone,My outside interface on ASA firewall suddenly came down:Interface Ethernet0/0 "outside", is down, line protocol is downcould someone help me with the posible reasons that could cause this? I am remotely connected to it.Thanks so much.

Cisco Systems is pleased to announce the availability of its 7.1(3) E4 service pack for Intrusion Prevention Systems (IPS). This release delivers new features and critical fixes. A subset of the new features includes extended support for Radius along...