Network Security

hello i'm little confused about argument "source" and "destination" behind object service protocal.here is simple example:ASA-FW01(config)# object service 3389 ASA-FW01(config-service-object)#  service tcp ?service-object mode commands/options:  dest...

Hi, I want to create a Dual DMZ in a ASA5510 however it is not like I used to in ASA5505 In ASA5505 I create a Outside, Inside and DMZ VLAN and there after add the interfaces into the VLAN.This way I can have two DMZ interfaces, but how do I do it in...

Hi,I see this is a popular one, but I can't see what I have done wrong.the set-up is: a DSL modem in half bridge (it does all the PPPoE connection) passes our static IP (55.167.x.x) to the ASA's outside interface ... (the modem has an IP of 192.168.1...

Hey guys,We have 2 Cisco 5510's setup in active/passive firewall mode with both firewalls running ASA version 8.2(2)I've reviewed the syslogs and from one incident this morning the active/primary started giving 211001: Memory allocation Error, which ...

Hello friends,I've installed AIP-SSM module in ASA, configed it, but have no see alerts. What i have:ASA 5520 8.2AIP-SSM 7.0(2)E4ASA# sh service-policy ipsGlobal policy:   Service-policy: global_policy    Class-map: IPS_TRAFFIC-CLASS      IPS: card s...

hi,we have an IDSM-2 module. i disable default cisco account on it. and create another administrator account. but this account has been locked because of 3 times failure login. i dont know what should i do for unlocking the account and login to modul...

Hi - I'm trying to connect to something through an ASA.My traffic is coming in on a DMZ interface (security level 0) and going to something on a DMZ3 interface (security level 50).From the GUI I configured NAT exemption from the source network (on DM...

Here is the setup: Cisco ASA 5510 (Security Plus) 7.2(3) connected in a hub-and-spoke setup in IPSec site-to-site VPN with 5 sites, each one with Cisco 877 routers. The sites have HVAC equipments connected to them talking Bacnet/IP. The central si...

Hi,I have been having logs for Access-lists configured on an interface on my 6509. Can anyone advise please if I am understanding it correct that IP10.61.64.202 is responsible for bursting attacks on udp port. Many thanks in advance for providing ins...

ASA 5510 running without issues for a while but we needed extra port so added a 4GE SSM.Having installed the 4GE SSM we had some issues with the card not liking a connection to our switches and only working by plugging directly from the server into t...

HiWe have a small business office, but due to PCI compliance we need to segment this into two internet networks (one 'compliant' and one for any other devices to use).We currently have a Draytek modem/wan load balancer which also has firewalling but ...