Network Security

i have PIX-525 firewall with no IOS " im working from monitor mode ".i need to install 8.X IOS can is install it immediatly , or should i install previous version and upgrade to 8.X .thnx

ASA's outside interface is a /24 in public address space. I also have a few different /24 public subnets that can be used for NAT. When I static NAT internal servers, do I have to NAT them to the /24 of the outside interface or can I use a difference...

Hi All,This doesn't seem like rocket science, but I'm a little stuck at the moment.I have four ASA 5520's with AIP-SSM modules recently installed. Two of them went through the simple setup process, browsed to the IP address, happy days all working an...

I have a private network behind a configured Cisco ASA 5510. I need to send data back and forth between a server on the inside network and a device on the outside network on port 44818. No amount of configuration is allowing this to happen. The packe...

We recently upgraded a ASA 5505 with the security plus license to allow us to add a second subnet, but are having a few problems configuring the second subnet.  The original subnet we have configured 10.1.1.0 is able to access the internet without an...

Hi All,Please can someone help with a failover issue that I ahve and Ijust cant get my head round it..I have two sites connected via 10G LES link and I have a Cisco ASA 5520 at each site. One of the Sites is the DC and the other is our DR site.I have...

I have a server in the dmz and I cannot access it via port 80 from the web.  I can ping the public ip without any problem but for some reason web and rdp cannot be accessed.  The web server on the inside interface is working fine.Anyone have any idea...

I want to configure a NAT Statement on a FWSM so that traffic initiated by an end user to a server with an IP Address of 10.20.x.x network will access it via a corresponding 10.60.x.x address.  But, I want all communications initiated by the server t...

Hi, does anyone why it is nigh impossible to block bit torrent with the ASA firewall. We have a ASA 5520 running 8.4 IOS.But (correct me if im wrong) the router based IOS firewall allows this functionality?? Whether CBAC, class maps etc.

Hello,We are looking into enabling "access-list optimization" on our FWSM modules and during research we are reading alot pros about this, but are not seeing any cons, so we are wondering if any one out there has ran into any issues or know of possib...

Hello!First of all, I want to mention that I know how extremely hot this topic is on any security forum in the Internet, including Cisco support forums. But, unfortunately, I also have to admit that I still cannot find simple and unambiguous answer f...