Network Security

Good morning,I have been configuring a cisco ASA 5520, everything is working fine but when i create an ACL: access-list OUT extended permit ip 172.16.x.x 255.255.255.0 anyaccess-group OUT out interface outsidei added ports like www or 443 and it is n...

Hi Guys, facing an issue here and need some expert knowhow....I have several interfaces on my ASA  that is also connected with S2S  to the HQ office...i have 3 /24 subnets heavily subneted inbetween interfaces and have a collapsed core as well so any...

Hello,I have a ASA5510 running asa841-k8.bin and ASDM 6.4.The CSC-module is a ASA-SSM-CSC-10-K9 running CSC SSM 6.3.1172.0.The module is reachable via ping and session via cli.If I try to connect via ASDM I get the error, that the Management-Port of ...

I would like to understand what configuration pieces need to be in place for SunRPC inspection to work properly. I have the following scenario: NFS server is on higher security interface, and NFS clients are on lower security interface. I have defaul...

Hi,I'm trying to migrate a configuration of an ASA 5520(Version: ASA 8.0(5)) to an ASA 5585 (Version: 8.4(2)). I keep getting some errors which are included below. I've been struggling with these for some copule of weeks and read the documentation on...

Hi Support people,I have been trialling IOS IPS on a number of Cisco ISRg2 routers and I have found that after enabling it the CPU jumps to 99% and I see packet drops (ingress) on the interface that IPS is applied.Has anyone else successfully deploye...

Have been running new sensor for about a week now.  I implemented in promiscuous mode as the documentation seemed to indicate that inline will tend to bottleneck internet traffic.My questions are :Are you running in inline mode and what can I expect ...

I am tyring to remotely diagnose a troublesome ASA5505 It is connecting via PPPOE and the original suscpicion was that the PPPOE was going down during heavy loads during the day, i.e 9am and lunchtime. I suspected MTU and have verified the MTU outsid...

HiHave cisco ASA5520 on place and i want to configure it to access my webserver outside of my network throught sftp/ftp with filezilawhat command to add so as port/service associate to it should be able to run?thx very muchJoseph

I was wondering if someone can tell me how to upgrade a Cisco Pix 525 boot rom from 4.0 to 4.3. Is it a physical chip or software upgrade? Is it needed to upgrade to latest IOS on Cisco Pix 525 to 8.0. Where can I find more information on it?  Thanks...

Hi all In cisco ASA i have created objects SO_asa(config)#name 10.2.1.0 SO_networkSO_asa(config)#object-group network SO_OBSO_asa(config-netwrok)#network-object SO_network 255.255.252.0network: IP address/mask <SO_network/255.255.252.0> doesn't pair ...

Hi, does anyone knows what was happened to the following PDF notes in Cisco? The PDF file is only contains 1 page compared to the original notes in html format which is about a few pages.If there is alternative link for this document, please let me k...

I am bit confused on terminology and how to go about setting up the ASA to block any SMTP traffic outbound except for our Exchange Server. This is in relationship to a SpamBot issue that blacklisted us.  I have an ASA 5510 running version 6.2(5) / 8....

Hi I have server with real address 10.173.1.242, i created static nat to address 10.164.32.15, but I can not to connect to address 10.164.32.15 from IP 10.161.111.130, here is config of ASA:PeterASA Version 8.0(5)!names!interface GigabitEthernet0/0na...