Network Security

Hello,I've been use to managing our ASA's on firmware 8.2, however we have got a couple of ASA's on firmware 8.4 for a new project and the NAT area especially in the ASDM is very different now, I feel like I know nothing.  On these new ASA's on 8.4 t...

Is there any advantage to creating a custom atomic signature that blocks the IP address vs making a host block that does not time out?  Seems to me the first would give a lot more logging options, but the second method would be a bit simpler for engi...

Is it possible to set up NAT translations to do the following on ourASAs?1) Have an external address (5.1.1.1) associated with an internal address (192.168.1.10)so that any externally initiated internet traffic directed to 5.1.1.1 gets redirectedinte...

I have an issue with an server that is connected to a DMZ on a ASA 5510There are errors on the log that says deny inbound udp from "object" to "dns server" due to dns queryThe rule base has port 53 open and is configured as part of a service group th...

Hi All:I prepare replace FWSM to ASA 5585 Series,but I confuse the default virtual context counts on ASA 5585.I used 3 virtual contexts on my old FWSM(1 admin context with 2 contexts).According the ASA configuration guide below.http://www.cisco.com/e...

Hello,I have the folowing subsriptions for Cisco ASA 5520:IPS SVC, AR NBDASA5520w AIP-SSM-10,4GE+1FE,3DES/AESCON-SU1-AS2A10K9IPS SVC, AR NBDAIP SSM-10included in ASAsystemsCON-SU1-ASAINC10 does this subscriptions include TAC services?

Dear sir,I need to update my IPS Signature on ASA5510-AIP-SSM automatically, From my local Cisco representative i got 2 product numbersto obtain the IP address of FTP server , username and password (Cisco support contract)In this case which one shoul...

Hello to all,     I have a question regarding firewall configurations. Is it possible to have two interfaces ( for two internet service providers) one for voice and one for data. Can I have two Outside Interfaces that one will apply to a pppoe client...

Is it possible to have 4 sensors at the same time for the IPS 4255 in Bypass mode?The idea its to have monitoring 4 differente interfaces connected to onle 1 IPS and if the IPS fail the traffic must continue the flow without stop.I attach an image of...

Hello all. I'm sure this question has been answered with certainty somewhere but I'm finding several different posts and to say the least they've left me a bit confused. At the end of the day I simply need to upgrade the license on my ASA 5505 v7.2.4...

Hello,I'm setting up 2 x ASA 5510's and have got the failover working and from the trunk port for my sub interfaces which goes into a 3750.  Anyway I'm have a bit of a nightmare as I can't get a PC on VLAN 50 with an IP of 172.26.1.222 to access the ...

Hi All,Users are able to connect far end network using cisco vpn client.Even ther are able to access url of far end network ,But the problem is ther are not able to fetch the data from there server.once they connect to network.So what might be causin...