Network Security

We have two internet connections name "outside" and "Voice".  The internet connection named "outside" is the main internet conection and the second internet connection "voice" is only used to reach a single IP address (9.9.9.9).  I would like it so t...

I don't know what's wrong with this:Doing access-list outside_access_in extended permit tcp any interface outside eq wwwis working but this:access-list outside_access_in extended permit tcp 172.12.33.0 255.255.255.0 interface outside eq wwwis not wor...

All,I need to update my Cisco 881W config to allow port forwarding FROM the Internet TO the following inside device as follows:IP Address:  192.168.1.254Protocol:  TCP/UDPPort: 5001This device is a Slingbox Pro-HD and I want to be able to view it fro...

I have to apply an ACL on a interface , so that inside users can access all the traffic but out side users can only ping inside users and can only return the traffic which is generated from inside. How can i implement this , should i use CBAC feature...

Hey, I'm having an issue accessing a box via ssh which goes through an ASA. The proper security is in place, but while doing the packet-tracer I notice that it is failing on the rpf-check. The router does have a route back to the source ip address bu...

We are planning to migrate a context from an ASA 5550 to Catalyst 6500 ASA blade.  The requirements are to use the same IPs, VLAN interfaces...etc.  This is all fine.  The issue comes with the ARP cache on devices between the firewall and the client....

Hi,ASA 5505 8.2(5), ASDM 6.4(5).  I have a segmented network, VLANs separated by SVIs on 6506.  Every SVI is configured to use pim sparse mode.  The RP is an SVI on the 6506.  I attached the inside int of the ASA to a new SVI I created.  The outside ...

Hi!I have FWSM running 4.1(6) with two security contexts.The context test config is:FWSM/test# sh run: Saved:FWSM Version 4.1(6) <context>!hostname testdomain-name fwsm.spbstu.ruenable password 8Ry2YjIyt7RRXU24 encryptednamesdns-guard!interface Vlan5...

I have been doing a bit of reading on this but so far I have only found scenarios where you migrate the whole ASA config and not just one context.  I have also read that there is a migration tool that can be used but this would require the ASA 8.5 to...

Hello,I have one public IP address but multiple local servers that run on the same port. I cannot change the port the clients use to connect to this server, so I can't do a port map in my NAT router. The solution I had in mind, is to filter on source...

HI Experts,In my lab setup i configured Cisco 3560 switch.VLAN 20 and VLAN 30 i configured.VLAN 20 interface IP : 192.168.20.1/24VLAN 30 interface IP : 192.168.30.1/24.Inter-vlan communication is happening fine.For testing for purpose i configured ex...

Hello everyone, I have Cisco ASA 5505 Firewall with security plus license, Currently I open ports on 25,80,443 on public  IP address 1.1.1.1 and perform static nat between the inside and outside IP address Such as i configured via CLIaccess-list OUT_...

Hi Guys,I’m trying to configure my ASA 5505, in order to allow my inbound and outbound mail communications. Here with this mail I’ve attached a diagram which illustrates my exact network setup along with ip addresses.In this setup I’ve enabled port f...