Network Security

Hello everyone and thankyou for taking the time to read this question.My company is bringing up a new accounting/Time and Attendance suite in November and the question of access as been asked over and over again.  They do not want to expose the webse...

Guys, can you help me ..In access list log we can know how much the access-list have been hit by traffic. In my firewall access-list there is a list doesn't hit by traffic. I want to delete my access-list which don't used for a month or more. Can I k...

Hi, is a protocol inspection or something like it that allow MSDTC flows avoiding to open a backward rule will all ports?I have for FTP and other protocols as ICMP too butMSDTC ?

I have imported a trusted wildcard certificate to a Cisco ASA 5510, that included the root and internediated CA Certs. Everything seems to have gone well but when I run a Nessus Vulnerability scan I receive the following. ||--- *** ERROR:|--- *** The...

Hi All,I am trying to implement a packet capture of the type "asp-drop" on a FWSM context but for some reason the FWSM is not accepting it.Below I have mentioned the command I am trying the error the FWSM is throwing at me.CUSTOMER-F1# capture TEST t...

Is there any way to use an asa 5510 to detect which computer on the inside of my network is connecting to ip 87.255.51.229.  I am being blacklisted for w win32/Zbot connection, I need to identify this computer and get it disconnected from the network...

Hello allI am working on a ASA that is in production so I need to bounce something off of you to see if my logic is correct.I didn't build the box but I am supporting it. My issuemy mgt interface is 192.168.23.1 When I use the packet trace tool to se...

I am trying to understand this following sentence regarding zone-based firewalls on a Cisco router, why they are wrong,1. "Interface ACLs are applied before zone-base policy firewalls when they are applied outbound."2. "The firewalls can be configure...

Hi I'm trying to setup a zone based firewall. I can't seem to work out what is going wrong. I have added the class maps, policy map, extended acls, and have defined the zones and added the zones to the interfaces. Can anyone see why this wouldn't be ...

HiWhenever we browse for gmail, rediffmail etc the data reaches the our network. No access-list is created to allow into our networkBut when we browse for client website or access client servers it doesnot allow  .we have creat access-list to allow i...