Network Security

I am trying to understand this following sentence regarding zone-based firewalls on a Cisco router, why they are wrong,1. "Interface ACLs are applied before zone-base policy firewalls when they are applied outbound."2. "The firewalls can be configure...

Hi I'm trying to setup a zone based firewall. I can't seem to work out what is going wrong. I have added the class maps, policy map, extended acls, and have defined the zones and added the zones to the interfaces. Can anyone see why this wouldn't be ...

HiWhenever we browse for gmail, rediffmail etc the data reaches the our network. No access-list is created to allow into our networkBut when we browse for client website or access client servers it doesnot allow  .we have creat access-list to allow i...

I am trying to use NME-IPS module in cisco 2821 running Cisco IOS Software, 2800 Software (C2800NM-ADVIPSERVICESK9-M), Version 12.4(24)T, RELEASE SOFTWARE (fc1)I haven't inserted the module into router yet.Do we need to insert NME-IPS module into rou...

Hi thereAfter rebooting an ASA-SSM-20 IPS the password is always reset back to the defaut (cisco). I have to SSH into the IPS and reconfigure the password each time. Anyone know why this is happening?CheersTim

Hi all,Running ASA 5520 8.2(1)I have an interface ACL applied, with a catch all at the end for logging traffic that does not match my specific rules.    access-list dmz-in extended permit ip DMZ-NET 255.255.255.0 any log informational interval 300 I ...

Hi,question1) When would any organization want to implement a dual layered firewall? Please give example.question2) Does it make a real difference if one were to use this scenario?question3) Cannot a powerful firewall be enough in order to avoid  the...

Hi,I have a cisco ASA firewall.Outside - Connected to Internet.DMZ- Connected to servers which open up connections to the Inside zone.Inside - secure applications.Scenario 1when request from the Internet hits the firewall public OUTSIDE ip. I nat it ...

Hi everyone.. please kindly help. We are using 4240 as a IDS at the moment and are looking to enable the IPS capability in near future.   However we only have one IPS on our site. For resiliancy we have 2 entry/exit points with 1 asa at each entry po...

Hi forumers'i am quite new to IPS. few quesiton to ask01. i install and configure the AIP-SSM-01 on my ASA unit, is it operating accordingly (attach 01 IPS)02. the virtual sensor 0 event action i set show as attached (attach 02 VS), is it meaning to ...

Hi,Since I migrate my Firewall with an ASA 5510 and I ve got some probleme with HTTP dowload from LAN. (The HTTP Browsing is good and I've no problem from DMZ).My Bandwith has been divided by two. I have got a 2Mb SDSL connexion.I use NAT to translat...