Network Security

HiWe have a small business office, but due to PCI compliance we need to segment this into two internet networks (one 'compliant' and one for any other devices to use).We currently have a Draytek modem/wan load balancer which also has firewalling but ...

This year's RSA is going to be especially exciting for Cisco Security fans.Continuing our highlights of content being covered at the show, check out today's new product announcement. Feel free to get any questions answered here that you didnt get to ...

Hi , i am using asa821-k8.bin image, in my cisco 5520, How can i check if my IOS is vulnerable ?Anyway to check that?

I am running a Cisco ASA 5510 with Trend Micro Interscan. We have it set up to filter https except for a handful of sites. It is filtering the ones we don't want ie: facebook, and youtube. Though it is causing all other https to slow to a crawl. Ther...

Hi Everybody,We are working on an Automation System from Honywell, there is a server called eSERVER and this one should take information form other server in the Control side.The issue is: When all the device are within the same LAN network the syste...

Hi,I have encountered a problem in one of customer that the Active ASA 5580 is unable to sync with Standby Failover ASA. When Active is connected with FO and push the configs to it will not find the ethernet/Gig interfaces due to which the all the co...

I am working on a zone-based firewall for a new location.    I am currently working on getting connections to infrastructure devices (2960 switch, WAVE 574).   I have a zone pair defined with an outside and a INFRA zone.    The class map is a match a...

n

Hi - In the ASA configuration guide for NAT, version 8.2 code, it states the following when referring to NAT exemption;" Like identity NAT, you do not limit translation for a host on specific interfaces; you must use NAT exemption for connections thr...

We recently had a new ASA installed and configured by a contractor.  I have been looking through the configs and I had a question that may have a simple explanation.  Below is a sample of the config.  access-list outside-entry extended permit ip host...