Network Security

Someone out there mu st have had this issue before. we have just configured our 3825 router with the IOS firewall application using the SDM defaults to start with but have hit a few issuses with being able to access webmail applications. we are using...

We were having a discussion of ios firewall vs. asa for smaller clients(less than 50). On using ios firewall(zbf or cbac)and an asa 5505/5510.  One of the arguments brought up on using ios firewall on the router is that a router will do an ip sla fai...

I have two ASA 5505's with Security Plus licenses on both.I am trying to force them to becoming an HA pair using active/standby.When I enable failover I get this message:Mate's license (Licensed Cores ) is not compatible with my license (Licensed Cor...

I have a computer behind the ASA 5505 firewall. The computer needs to access Microsoft Activation Server. Reading some website information, I need to allow a huge list of servers that basically points to www and https traffic. Therefore, looking at t...

WE have a DMZ on ASA5510 8.4, it can access anything internal  interface but cannot get out to internet or outside interface. I try to ping from a host in the DMZ to 8.8.8.8 and get this in the log6Apr 25 201208:24:431100038.8.8.80172.10.1.1501Routin...

Hi all,Last night, the inside interface on our primary ASA seemed to "hang". It dropped all the packets it received. Because the interface didnt go down, failover didnt happen. Device's info;Cisco Adaptive Security Appliance Software Version 8.2(3)De...

Good afternoon!At my work I'm having an interesting issue.  I am trying to map out ip space in certain areas of my network through firewalls and determine what IPs are active and not.  The issue I am running into is that when I run NMAP or just a reg...

Hi All,I have a query regarding static policy NAT within the following scenario - I have the following simulated setup - 3 customers (CUS#1, CUS#2 and CUS#3)Each customer has a server (CUS1-SRV#1 - 192.168.1.1/24, CUS2-SRV#1 - 192.168.2.1/24 and CUS3...

We have two infected hosts which were scanning our entire 10.224.x.x  networks.The ASA firewall was responding to packets that were destined for networks that do not exist and are not configured behind it.  All traffic destined for networks that do n...

Hi Guys,Here is the config uration of my admin context on asa 5585 with 8.4 versionhostname FW-MAINdomain-name bc.comenable password xxxxxxxx encryptedpasswd xxxxxxx encryptednamesname 10.0.0.0 xx-Aname 172.16.0.0 xx-Bname 192.168.0.0 xx-C!interface ...

Hi,How can i except log generation some ip address on ASA.I want to filter for generation syslog message for spesific IP address on ASA.Thanks.