Network Security

I decided to take the plunge and start learning a little about Cisco, the IOS, and firewall configurations.I purchased a Cisco Pix 525 used, defaulted with Cisco Pix Security Appliance Software Version 8.0(4), unlimited license.My plan was to work th...

HI friend,I want to kown if is posible install IOS 8.3(2) and asdm 6.3(1) in firewall 5505 wich has 512MB of RAM and 128MB of flash. I installed it but according to the cisco page it can´t. maybe could work bad ? i dont kown.could you helpe me with t...

Hi Guys,I am having issues getting  my Cisco IPS to automatically download and install signature updates from Cisco. I have Cisco 6513 which houses my IPS module. The Proxy and DNS settings are configured correctly in line with our IP address paramet...

Hi dears.my mail server at dmz zone and i want  static nat.i write access list which is dmz zone access to inside zone(as you know security level) and i also configurated proxy at dmz zone.i also write access list for proxy server.access-list access-...

Hello,Could you please verify this configuration:I have 2 inside networks:object network INSIDE_10.6subnet 10.6.0.0 255.255.0.0object network INSIDE_192.168subnet 192.168.0.0 255.255.255.0I grouped these 2 into 1 object-group:object-group network INS...

Hello,At our client I configured Split Tunneling on an ASA but somehow it doesn't seem to function.I have the feeling I'm missing something but I don't see what.Situation as followed:Network: 10.38.11.192 255.255.255.224group-policy VPNCLIENTS attrib...

We have activated plus license, but at Url filtering category nothing works. Categories are empty ('plus' becames 'minus' but nothing appears). Tried it on different PC's with Chrome, Mozilla, IE. Latest java is installed.

In Cisco IOS, I can get the ARP/IP table on the router with the following MIB:  .1.3.6.1.2.1.4.22.1.2For example:[root@lab-CentOS-3 ~]# /usr/bin/snmpwalk -v 2c -c Finra_lab 192.168.15.254 .1.3.6.1.2.1.4.22.1.2IP-MIB::ipNetToMediaPhysAddress.1.98.174....

Hi,I don't want to change the global UDP idle timeout for the entire firewall for obvious security reasons but I have to change timeout for a particular UDP port from a known source IP to another known destination IP. I tried using:object-group servi...

I am in the process of setting up an IPv6 Tunnel Broker on a 1811 router I have in my home lab so I can start working with IPv6 and getting access to IPv6 only websites and/or content.  I believe that I have the 1811 setup correctly but am having pro...

HiCan we terminate 2 Internet link on ASA and get loadbalancing  + failover setupLoadbalancing -  send http,https traffic on Link A  and other traffic on Link BFailover  - If Link A fails then all traffic reroutes to Link B and vice-versaThanksAntho...

HiI got ASA 5510 and need to block traffic to youtube and facebook for some users, can we do this on ASA.Doing some research I found that its doable if you got Microsoft ISA or Bluecoat ProxythanksAnthony

We have CSM 4.1, and I can create great event loggs in the Event Monitoring Tool, i.e. all denied hits on one specific Firewall in a specific time frame (see attachment).How can I export this data and send it to the customer? (preferd as Excel or PDF...

Hi,Attached is my network diagram.Internet Router has two Gig Interfaces one is connected to my ASA box and other is connected to a Content Filtering Box(Smoothwall). By default my internet traffic is routed to ASA box and then it will be passed on t...