Network Security

Hi,We have a requirement where we need to enable a dynamic NAT from DMZ-1 to Inside, I gave the command below, but for some reason it does not work.nat (DMZ-2,Inside) source dynamic any interfaceNOTE: The access-list is permitting all the traffic fro...

Can I upgrade from 8.2.3 to 8.4 or would it be better to upgrade to 8.3.2 first?

I was receiving email alerts from my IDS as recent as April of this year. and they have stopped.  I usually login using the RDM web interface, but downloaded and installed the IME yesterday.  When I attached my IDS and reviewed the event monitoring I...

Greetings,I have a NAT set up for a sever in our DMZ.I need to know how I can redirect port 80 calls coming into the outside NAT address - to port 443 on the DMZ sever.Thanks.

We are having Reverse DNS issues.10.10.0.10 = Exchange ServerWindows 2003 = DNS server internal. Setup: 1 to 1 NAT10.10.0.10 smtp --> 70.89.133.218 smtpInt gi0/2 = 70.89.133.217Incoming Access Rule:any --> 70.89.133.218 smtp permitWhen we do a Whatis...

i have an ASA 5520 8.4(1) with following configinterface GigabitEthernet0/0 nameif WAN security-level 0 ip address 216.52.185.33 255.255.255.240 standby 216.52.185.34!interface GigabitEthernet0/1 nameif DMZ security-level 50 ip address 216.52.185.49 ...

I'm trying to track down what I believe is a false positive for Rustock Botnet sig 17363-3.  This is a "service HTTP" signature and it indicates "yes" on specify URI regex, specify header regex and specify request regex, but the regex field is blank ...

Has anybody tried to build dhcpd pools for nortel phones on an asa 5505. This is the config that I'm trying. The results I'm getting are that the pc and the phone both pull addresses from the data pool. If I switch the vlans on the trunk port, both d...

I am setting up a new ASA and I have configured it for multiple contexts. I created subinterfaces for each physical interface (including the inside and outside). All physical interfaces have been plugged into trunk ports. I have configured all with V...

we configured Netflow on C6500 and it is working , but the traffic behind FWSM is not appeared on Netflow Collector.is Netflow supported by FWSM 4.0 , if yes what is the required configuration?Thanks

hello,i've installed the ssh-Plugin ssh-plugin.080430.jar into our Cisco ASA 5510 Software 8.0(4).I've created an Entry in the Webtype ACL list and in the Bookmark List. When i connect to the ssl-VPN, i can start the ssh-Java-Aplett and enter usernam...

Our proxy/anti-smap/IPS box called PROXY is behind our Cisco ASA firewall. The PROXY is set in transparent mode. The PROXY internal ip is 1.1.1.1 (internal ip)We have the MX record for mail.domain.com with public ip 9.2.7.5 (public ip as we entered w...

Hi,How do I block this url in a ASA with http inspection? www.123.com/login/login.aspWhen I use this expression it does not work:      www\.123\.com\/login\/login\.aspthx,Marc