Network Security

Hi CSC,I have a question,If ACL does not allow host to communicate, why is not the source IP be the firewall interface that deny the communication? This is detrimental as it does not reflect who is the root cause. Any way to reflect who is denying th...

Hi,Since I couldn’t find it in the internet, I hope I can find it here.What is the difference between teardown & deny in Cisco ASA syslog message?Thanks in advance

Hi All,I got a situation here for Nat-ed IPs i configured. I expected to open some ports on the interface to allow certain traffics to pass through, yet there are some of them are failed. Down is my current config.object-group service DM_INLINE_SERVI...

Hello,I have a Cisco 2811 running Advance Enterprise v 15.1-2.  I've just configured it using ccp for internet access (on 2 lines) and a firewall.  The configuration is pretty much all default and I used the ccp wizard to create a 'medium-secure' fir...

I have installed a new SSL certificate on our ASA 5500. I removed the old one, installed the new one. And associated the trustpoints with the interface we use for Web Connect and AnyConnect connections.They are still seeing the old expired certificat...

Hi Experts ,We are experiencing high memory utilization in PIX 515E firewall . It has 128MB DRAM and the average utilization stays mostly at 99% which is quite a concern now . Remote Access VPN Users are unable to connect with the following error whe...

Is it possible to relay traffic out of the same interface?  For instance we have a computer on the Internet that only is accessible from our network.  I'd like users to connect to our network, look at the ACL, and then connect to the remote computer....

I may have phrased the topic not too clearly, but I have an external domain name of mail.company.com , I want my users INSIDE the company be able to also get to https://mail.company.com , currently they cannot (nothing loads, looks to me as if firewa...

Hello,As the subject suggests I have a ASA here that refuses to load 8.x code. I do not have an issue loading 7.x code at all. When I power on the ASA it does not pass the fsck.Loading /asa842-k8.bin... Booting...Platform ASA5520Loading...IO memory b...

If an ASA is configured with an access-list but no access-group applying the access-list to specific interfaces, does the access-list get applied across all interfaces?Thanks!Norris Carden, CISSP, CISA

Hi,Assume, there are two ASA firewalls which are pairing and working as an Active/Standby failover pair. I would like to migrate the stand-by one to the different locaton and then, i would need to do some configuration changes including the new vlans...

Hi all,I have a Cisco 2951 Router on which I configured routes for Zone-Based Firewall. I have a FTP server inside my network and I have allowed hosts from the internet to connect to it through the router. They, are however not able to connect or the...