Network Security

Chaps,Is it possibel to bypass Cisco NAC with a client running VMWare.My understanding is that VMWare can run in a NAT mode which uses the IP and MAC of the guest OS, if this is the case then is it possible to fool NAC by running the Agent in a guest...

I have ASA 5520 which works fine, but after some time it denies any management access exept console. Asdm 641, SW asa 841. With previous versions i didn't have such problems. ASDM Launcher hangs duting log in, telnet and web access are logged:       ...

Hi,  I have the following Setup, Two Cisco ASA 5520 needed to be  configured in HA Active/Passive. The Firewalls includes also AIP module. Does the ASA 5520 will internally make the AIP modules also HA Active/Passive? Is there a document regarding th...

I have recently deployed a Cisco ASA 5510 Security plus firewall on my companies network, butthere is a problem that I am finding hard to get by and I think it is ASA related.From (inside we are not able to hit any of our sites that are on the (outsi...

Hola,El problema es que estoy migrando un firewall fortinet a un ASA5540, pero resulta que el firewall fortinet tiene 3 zonas inside (192.0.0.0/24), dmz(192.168.0.0/24), y outside (z.z.z.z), asi mismo hay una peculiaridad con el acceso a las aplicaci...

Hey folks.  I need some help with my configs (I think).  I have two 1811's connected in a lab using a ipsec vpn tunnel (using a switch to simulate an internet connection between them).I am trying to configure one of the routers as a ZBPF just to allo...

I am attempting to FTP to a remote site through a IPSEC tunnel.When I am transfering large files the ASA5540 is showing syslog errors stating "connection timeout".  What I think is happening is after about 1 hour the firewall is closing the connectio...

Hi Gurus,I have ASA 5505 with base license. I like to install proxy server in my network.I configured below commands to forward my traffic to proxy server from my ASA.access-list p-client extended permit tcp 10.91.40.0 255.255.255.0 any eq www access...

Hello,i would like to ask if there is a way to block skype supernode packets on an IPS module. The reason why i want to block these application is because when skype starts on host in my network i establishes about 100 connections all over the globe....

Hi,I'm looking for advice about the firewall ASA5510. I'm planning to get one of ASA5510 for our office in order to secure our network properly, however we have quite specific routing configuration to allow us failover to the remote location (data ce...

I just installed a new ASA 5505 for an office with three internal subnets.  The three networks can each get online fine and ping eachother, but cannot browse to shares on the two internal networks other than their own.  How do I configure the ASA to ...

Hi Guys,I have an existing pair of PIX 515E that has two interfaces. One connected to the public internet via my ISP and one internal.I recently ran out of IP's and had the ISP route an additional block to public IP of my firewall. This isn't working...

Just wondering if there are any methods or commands, natively, in the asa5510 for determing all traffic in to and from a certain server passing through the asa.  This would be without a syslog server or something similar.