Network Security

We recently had a new ASA installed and configured by a contractor.  I have been looking through the configs and I had a question that may have a simple explanation.  Below is a sample of the config.  access-list outside-entry extended permit ip host...

Does Catalyst Cisco 3750 supports NAC Fail Open Feature?Symantec Network Access control has been deployed in our network to protect the end user systems and access control.we initiate to enhance failover/fail open solutions on the switches to minimiz...

I have a weather station at our high school that needs UDP port 9500 open inbound/outbound to specified IP addresses. I need help in configuring this. Thanks.Cisco PIX Security Appliance Software Version 8.0(4) Device Manager Version 6.1(5)57

Hello,I have a 5505 configured with a active/standby dual wan setup using the sla tracked connection settings. Is there a way to configure the ASA to stay on the backup connection after activating? We had a situation where the main T1 was bouncing, s...

Hi guys,i am hoping if anyone can reply to my query below.We have got a new batch of servers and they reside on a separate VLAN 192.168.45.x 255.255.255.0Those  servers are required to be registered on the DNS server located on  the remote site (SITE...

Hi,We are using Netflow on our ASA and our internet pipe inbound is at it's maximum and in Netflow I can see the external IP of the site and the destination IP is the outside IP of our firewall, how can I see what our ASA is PATing this address to in...

Narayana,show ip access-lists iptrafficReflexive IP access list iptraffic     permit tcp host 72.5.37.36 eq 443 host 128.59.238.108 eq 4270 (1 match) (time left 299)thanksJosephWe have access lists set up for a remote site. The acls are applied to th...

Hello.We are using FWSM with software version 4.1(6) with failover and multi contexts.We need to generate and send mail notifications when failover occurs.With this configuration we are receiving syslog only!fw-csc/1/fw-csc1/act# sh run logglogging e...

Just wanted to verify that this is how to accomplish port triggering under IOS:https://supportforums.cisco.com/thread/32968Also, if wanting to trigger multiple ports just adding another line to the ACL is sufficient, or specifying "range" whether it'...

I've got smart call-home setup to email me various info but the config always has '-<IP removed>' for any IP address.Any way to get call-home to send an unaltered config?Thanks for the time.

Dear,Please find the attached topology,Can I make the VPN tunnel between site B (ASA) outside interface & site A (Router IOS) LAN interface?because i received the dynamic IP on my site A (Router) WAN interface from ISP but I have public IP configured...

I have a need to use another class C subnet for outbound NAT purposes, but this new range isn't bound to the outside interface. Is this possible?Outside interface IP: 1.1.1.1/24Inside interfac ip: 10.1.1.x/24New block: 192.168.1.0/24New inside hosts ...