Network Security

HI there.I've had a request that i'd like to run past the group as i'm confused on how this may look / work.A client has asked us to setup a VPN to thier office but only allow the connection from one internal IP. Users would have to access this remot...

hi all,I have some issues with Twin  PAT on ASA (8.4.2), there is sth I dont udnerstandFTP server is on the inside and client is in outside.I did sth like thisobject network NATED-11 host 20.20.20.11object network REAL-2 host 10.200.200.2object servi...

hello i'm little confused about argument "source" and "destination" behind object service protocal.here is simple example:ASA-FW01(config)# object service 3389 ASA-FW01(config-service-object)#  service tcp ?service-object mode commands/options:  dest...

Hi, I want to create a Dual DMZ in a ASA5510 however it is not like I used to in ASA5505 In ASA5505 I create a Outside, Inside and DMZ VLAN and there after add the interfaces into the VLAN.This way I can have two DMZ interfaces, but how do I do it in...

Hi,I see this is a popular one, but I can't see what I have done wrong.the set-up is: a DSL modem in half bridge (it does all the PPPoE connection) passes our static IP (55.167.x.x) to the ASA's outside interface ... (the modem has an IP of 192.168.1...

Hey guys,We have 2 Cisco 5510's setup in active/passive firewall mode with both firewalls running ASA version 8.2(2)I've reviewed the syslogs and from one incident this morning the active/primary started giving 211001: Memory allocation Error, which ...

Hello friends,I've installed AIP-SSM module in ASA, configed it, but have no see alerts. What i have:ASA 5520 8.2AIP-SSM 7.0(2)E4ASA# sh service-policy ipsGlobal policy:   Service-policy: global_policy    Class-map: IPS_TRAFFIC-CLASS      IPS: card s...

hi,we have an IDSM-2 module. i disable default cisco account on it. and create another administrator account. but this account has been locked because of 3 times failure login. i dont know what should i do for unlocking the account and login to modul...

Hi - I'm trying to connect to something through an ASA.My traffic is coming in on a DMZ interface (security level 0) and going to something on a DMZ3 interface (security level 50).From the GUI I configured NAT exemption from the source network (on DM...

Here is the setup: Cisco ASA 5510 (Security Plus) 7.2(3) connected in a hub-and-spoke setup in IPSec site-to-site VPN with 5 sites, each one with Cisco 877 routers. The sites have HVAC equipments connected to them talking Bacnet/IP. The central site ...

Hi,I have been having logs for Access-lists configured on an interface on my 6509. Can anyone advise please if I am understanding it correct that IP10.61.64.202 is responsible for bursting attacks on udp port. Many thanks in advance for providing ins...