Network Security

Hi Guys,I am currently getting DoS/DDoS on my asa 5520 , the attacker is hitting IP's that are not even open on any port. The attack is filling up the queues on the firewall which is at 99% CPU during the attack. here's the NetFlow info that I was ab...

hi ,I have a cisco asa 5510 with security plus license in Live enviroment .I need to add a secondary firewall . I was planning to do in active /standby mode for failover . But i have a doubt , when i do "show version " on live asa output says Active ...

Hi, I´m trying to make an upgrade of my ACS 4.0 (windows server 2003) to a new ACS 5.2 (appliance). According to Cisco papers, first step is to make an upgrade from ACS 4.0 to another ACS 4.1.1.23 or ACS 4.1.1.24 on Windows and then migrate my data t...

Hi, Since moving to the new object oriented nat syntax - i have encountered problems with using port address translation from many to many.With many thousands of users behind a firewall all passing traffic from inside to outside, I am required to res...

I want to make sure I understand how the nat requirements work on asa v8.0 when inter-interface is set.  Background:nat control is off.same-security-traffic permit inter-interface is on."inside" and "MPLS" interfaces are both at security level 100."o...

I thought this would be simple at first but I seem to be getting a little stuck on it.  I need to forward ports 80,443,51111 to internal hosts.  80 and 443 need to go to my web server (192.168.5.15) while 51111 needs to go to another server (192.168....

Hi Expertswhat is the technical difference betwen: access-list acl permit tcp host 10.10.10.10 eq 80 any ?                               and access-list acl permit tcp host 10.10.10.10 any eq 80 ?it confuses a little bitthanksjamil

I'd like to setup a DMZ network with the ASA5505. Do I need the "Security Plus Bundle"?

I would like to add a Meraki MR16 AP to our DMZ which is on our ASA 5510. I use a switch connected to the DMZ port of the ASA and that is where my webserver is plugged in. I want to keep the traffic completely seperate from our internal LAN. What is ...

According to Cisco, MPF application inspection on the ASA is done AFTER network-address translation (and access-lists).So a simple scenario like thisstatic (inside,outside) 192.168.1.2 65.100.100.1 netmask 255.255.255.255access-list test extended per...

A virtual server currently has Exchange installed on it with load balancing on our network. Each NIC has its own IP address and they want one external address for it to NAT to.  Looking at our ASA, we can't overlap addresses...meaning I get an error ...

I keep struggeling with Cisco ASA. Can someone explain a systems engeneer with noob experience on networking how I can make a certain NAT (RDP, SSL or whatever) and securing it by allowing just one external client with fixed internet IP to make use o...

Dear All,one of my SNMP server 10.242.103.42 sits in MZ zone,and ACE 4710 is connected to core switch,coreswitch is connected to firewall asa.Now iam trying to ping from MZ zone SNMP server to loadbalancer ip 10.242.105.1,iam unable to ping my LB int...