Network Security

I'm putting a couple of servers in my DMZ on a PIX 515E. The inside is nated (192.168.199.0/24) and the DMZ is nated also (192.168.200.0/24). inside the DMZ is an ISA 2006 server. I was to block that server off entirely except from the inside network...

currently run the following config on my switchesarchive   path flash:/backups/config-$t   time-period 40000   maximum 6   write-memorywas wondering if there is an ASA equivalent. I'd like to keep the config backups on the local device, not send them...

We have a cisco 5510 connected to a LAN segment with a cisco 6500 and multiple vlan's. and using Class B address range.We have a NAT device (Non-cisco product ) on top of the Cisco ASA-5510 handling all the static and Dynamic NAT.We have lots of inte...

Hi,I found the following item on the Cisco ASA5510 quotation. I’ve been searching on the internet but couldn’t find info about the meaning of each part highlighted with blue & bold font. Therefore, I would appreciate if you could share this info with...

i  am  using Cisco ASA5510 Firewall  in my  Network in the distrubition Layer .Private Range of Network Address  use  in the Network  and PAT  at the FW for  address translation.presently  encountering an issue  the users  behind  the FW  in my netwo...

I have a business with about 350 users at HQs and 5 remote sites each with about 5 users to connect through VPN. The remote sites are connected to internet through various ISPs. In addition to firewall services, I would like to control malware, virus...

Hello,I've been use to managing our ASA's on firmware 8.2, however we have got a couple of ASA's on firmware 8.4 for a new project and the NAT area especially in the ASDM is very different now, I feel like I know nothing.  On these new ASA's on 8.4 t...

Is there any advantage to creating a custom atomic signature that blocks the IP address vs making a host block that does not time out?  Seems to me the first would give a lot more logging options, but the second method would be a bit simpler for engi...

Is it possible to set up NAT translations to do the following on ourASAs?1) Have an external address (5.1.1.1) associated with an internal address (192.168.1.10)so that any externally initiated internet traffic directed to 5.1.1.1 gets redirectedinte...

I have an issue with an server that is connected to a DMZ on a ASA 5510There are errors on the log that says deny inbound udp from "object" to "dns server" due to dns queryThe rule base has port 53 open and is configured as part of a service group th...

Hi All:I prepare replace FWSM to ASA 5585 Series,but I confuse the default virtual context counts on ASA 5585.I used 3 virtual contexts on my old FWSM(1 admin context with 2 contexts).According the ASA configuration guide below.http://www.cisco.com/e...

Hello,I have the folowing subsriptions for Cisco ASA 5520:IPS SVC, AR NBDASA5520w AIP-SSM-10,4GE+1FE,3DES/AESCON-SU1-AS2A10K9IPS SVC, AR NBDAIP SSM-10included in ASAsystemsCON-SU1-ASAINC10 does this subscriptions include TAC services?

Dear sir,I need to update my IPS Signature on ASA5510-AIP-SSM automatically, From my local Cisco representative i got 2 product numbersto obtain the IP address of FTP server , username and password (Cisco support contract)In this case which one shoul...

Hello to all,     I have a question regarding firewall configurations. Is it possible to have two interfaces ( for two internet service providers) one for voice and one for data. Can I have two Outside Interfaces that one will apply to a pppoe client...