Network Security

I need to make sure that the firewall is listening to accept traffic destined to this address, 10.10.10.4 on port 80, or if it is for  68.179.71.3.  The traffic should be going in and out the same path to avoid asiymetric routing  This not happening ...

Hi Expert,As we know default tcp timeout value on ASA is 1:00:00 . But I need to configure tcp timeout value between two host as 2:00:00. Rest all connections TCP timeout value should be 1:00:00.Below is scenarion.server 172.21.3.5-----inside_interfa...

Community, this is probably an easy one for someone out there who knows what he's doing.Setup:============I have an ASA5510 with 4 interfaces:     outside 1.2.3.107 (sec level 0)     inside 10.0.0.251 (sec level 100)     guest 172.31.255.0 (sec level...

Hi all,Quick question. Is VP3N a form of QoS for Firewalls?Cisco CUCM and IP soft-phones will be connecting over a VPN connection, but I need to ensure some form of QoS if possible?For traffic leaving and entering the Firewall devices.Or would this b...

Hi,i want to configure site to site asSite A want to use public ip range in interesting trafficsite B want to use private ip range in interesting trafficsite A range   196.x.x.x/255.255.255.0Site B range 172.16.4.0/255.255.252.0Note site B also has a...

We have an ASA-5505 running 8.2(1) with a Bosch DVR 600. When a machine is on the local subnet, it can see the video; however, when it's moved to the DMZ, the unit can be accessed, but all video screens are black and an java script error pops up as f...

Hi All,Equipment:1x Cisco ASA55401x Catalyst 3750x-48T (L3 Core Switch)Id like to seek expertise on validating a simple firewall setup.Do i trunk core switch traffic to the cisco ASA OR assign L3 link instead?It is basic understanding that the Cisco ...

hello folks,can someone please help I'm trying to block traffic entering one interface but with no success. Can someone please help??? config below#!interface Vlan955 nameif fwsm-ServerFarm-WEB security-level 50 ip address 10.20.34.94 255.255.255.224...

Hi,We set up multicast routing as advised in configuration guides.The details:- We use ASA 8.4(1) , enabled multicast-routing - source is on the outside interface- receivers are far away in the network core on the inside interface- we use pim sparse ...

I've got an ASA 5510 running 8.4I have a host on an inside interface, with a static NAT configured on the ASA. The inbound/return half of the NAT doesn't appear to be working.Config summary:object network nat-test host 192.168.100.98access-list outsi...

Hi,To cater redundancy for EM we have created 2 EM service: EM-1 & EM-2. I can find both of these EM services on any IP phone, i can login as well. The problem that i am facing is: once i logged in chssing EM-1 or EM-2, if i press the Service button,...

Hi all. This is complicated, I'll try to explain succinctly. I have an ASA that is one end of an IPSEC tunnel. The IPSEC tunnel dumps traffic off onto the ASA, but instead of forwarding to the next hop, we see a log entry like the following: Mar  7 1...

8.4(3)I need to outside PAT all incoming UDP (SIP/RTP) traffic from outside to an internal IP. The following command makes it work:nat (outside,inside) source dynamic any obj-10.0.0.173 service udp udpBut it breaks DNS resolution from inside. If I ad...

Hi everyone,which ASA 5500 model can best be recommemded for the following specification?Number of Internal users: : 150 UserDo you have an external router handling routing of packets internally and externally- if no, do you need the Firewall to do a...

HI there.I've been asked to configure a VPN to a remote office location and to NAT my Office VLAN behind one fixed IP.My office VLAN: 172.16.101.0/24Assigned static IP: 172.16.101.250Remote Office: 10.192.0.0/24I am ok to configure the VPN and IPSEC ...