Network Security

I have a Cisco ASA 5520 (8.0) and I'm trying to figure out how to prioritize traffic to specific websites (by either domain names or IP addresses/ranges).  This document https://supportforums.cisco.com/docs/DOC-1230 has some great examples, but I'm n...

Quick question about this state change reason.  We had an FWSM, in a two chassis redundancy configuration, recover from a reload and it went from state Not Detected to Disabled due to LAN Interface become un-configured.   I have a sneaking suspicion ...

I need a little help.  I lost the ability for my Web server (or any servers in the DMZ) to access the Internet. However, the Web server is still being used fine from the Internet. Here is my config, any help would be appreciated.ASA Version 8.4(2) !h...

I'm trying to use port redirection to allow outside access to a internal web server. As far as I can see, everything is configured properly. The Open Port Checker tool from yougotsingle.com says that the port (80) is open. However when I goto access ...

Hi Everyone,I have an ASA5550 and have a few remote users using  the CISCO VPN client on their laptop to remote into our network.  How do I coonfigure the ASA to scan the remote host (ensure that they have an Anti-Virus program and it is up-to-date) ...

What is the impact of disabling xlate in FWSMHi,We have dynamic NAT configured from inside to outside interface, but still it is showing NAT entry as below."NAT from inside:177.26.99.10 to outside:177.26.99.10 flags Ii"Expected NAT entry should as be...

Hi all,           I am hopping that someone here has experienced this issue and can shade some lights for me! With that being said, let's get to the bottom of this. Our ASA 5510 has been in place for nearly two years, we never have any issue what so ...

I saw the message which is written below in this address ; http://cisco.com/en/US/products/hw/vpndevc/ps4077/products_configuration_example09186a0080671a8d.shtml “The IPS appliances must be in on-a-stick mode, meaning that the IPS appliance can...

I'm being asked (by an auditor) to provide "system-generated evidence of password frequency requirements being enforced" on the 4240 IPS sensors. Any suggestions?

Hi Team,im having pix 515 with os 708 & asdm 508 versions. assume i have few lines similar to the below.. I have installed the asdm for the first time and i am getting the errors as attached here...asdm group abcasdm group defasdm group ghinow i am u...

Hi,I have a firewall which is conntect to a Cisco 870 router. The router only allows one ip address to ssh into and it which is 7.7.7.7 but the interface which is connected to the router is on the firewall is a 2.2.2.2 and the router interface is a 2...

We have a large network with a bunch of partners in an MPLS cloud. All networks are behind an ASA. We use nat (inside) 0 0.0.0.0 0.0.0.0 because we perform nat translation at another point on the network.This particular subnet has a new ranges behind...

I have a pair of asa5520's in active/standby configuration.  I plan on ugrading the asa/asdm images to 8.4 shortly (currently on 8.0) and would like to do this with zero downtime.  Specifically, I would like to upload the new software to the standby ...