Network Security

I have to apply an ACL on a interface , so that inside users can access all the traffic but out side users can only ping inside users and can only return the traffic which is generated from inside. How can i implement this , should i use CBAC feature...

Hey, I'm having an issue accessing a box via ssh which goes through an ASA. The proper security is in place, but while doing the packet-tracer I notice that it is failing on the rpf-check. The router does have a route back to the source ip address bu...

We are planning to migrate a context from an ASA 5550 to Catalyst 6500 ASA blade.  The requirements are to use the same IPs, VLAN interfaces...etc.  This is all fine.  The issue comes with the ARP cache on devices between the firewall and the client....

Hi,ASA 5505 8.2(5), ASDM 6.4(5).  I have a segmented network, VLANs separated by SVIs on 6506.  Every SVI is configured to use pim sparse mode.  The RP is an SVI on the 6506.  I attached the inside int of the ASA to a new SVI I created.  The outside ...

Hi!I have FWSM running 4.1(6) with two security contexts.The context test config is:FWSM/test# sh run: Saved:FWSM Version 4.1(6) <context>!hostname testdomain-name fwsm.spbstu.ruenable password 8Ry2YjIyt7RRXU24 encryptednamesdns-guard!interface Vlan5...

I have been doing a bit of reading on this but so far I have only found scenarios where you migrate the whole ASA config and not just one context.  I have also read that there is a migration tool that can be used but this would require the ASA 8.5 to...

Hello,I have one public IP address but multiple local servers that run on the same port. I cannot change the port the clients use to connect to this server, so I can't do a port map in my NAT router. The solution I had in mind, is to filter on source...

HI Experts,In my lab setup i configured Cisco 3560 switch.VLAN 20 and VLAN 30 i configured.VLAN 20 interface IP : 192.168.20.1/24VLAN 30 interface IP : 192.168.30.1/24.Inter-vlan communication is happening fine.For testing for purpose i configured ex...

Hello everyone, I have Cisco ASA 5505 Firewall with security plus license, Currently I open ports on 25,80,443 on public  IP address 1.1.1.1 and perform static nat between the inside and outside IP address Such as i configured via CLIaccess-list OUT_...

Hi Guys,I’m trying to configure my ASA 5505, in order to allow my inbound and outbound mail communications. Here with this mail I’ve attached a diagram which illustrates my exact network setup along with ip addresses.In this setup I’ve enabled port f...

Is there any way to access a MS Exchange Server 2007 on Windows server 2008 through an ASA 5510 running 8.4 with a full MS Outlook client (not using OWA - web browser)?  OWA is currently working fine but I was wondering if access via the full Outlook...

HI, I have an ASA and we now have a requirement that we need to be notified in case of a security concern.  I have the firewall sending syslog messages to a central syslog server but I would like to know based on what syslog keywords should I be send...