Network Security

Is there any way to use an asa 5510 to detect which computer on the inside of my network is connecting to ip 87.255.51.229.  I am being blacklisted for w win32/Zbot connection, I need to identify this computer and get it disconnected from the network...

Hello allI am working on a ASA that is in production so I need to bounce something off of you to see if my logic is correct.I didn't build the box but I am supporting it. My issuemy mgt interface is 192.168.23.1 When I use the packet trace tool to se...

I am trying to understand this following sentence regarding zone-based firewalls on a Cisco router, why they are wrong,1. "Interface ACLs are applied before zone-base policy firewalls when they are applied outbound."2. "The firewalls can be configure...

Hi I'm trying to setup a zone based firewall. I can't seem to work out what is going wrong. I have added the class maps, policy map, extended acls, and have defined the zones and added the zones to the interfaces. Can anyone see why this wouldn't be ...

HiWhenever we browse for gmail, rediffmail etc the data reaches the our network. No access-list is created to allow into our networkBut when we browse for client website or access client servers it doesnot allow  .we have creat access-list to allow i...

I am trying to use NME-IPS module in cisco 2821 running Cisco IOS Software, 2800 Software (C2800NM-ADVIPSERVICESK9-M), Version 12.4(24)T, RELEASE SOFTWARE (fc1)I haven't inserted the module into router yet.Do we need to insert NME-IPS module into rou...

Hi thereAfter rebooting an ASA-SSM-20 IPS the password is always reset back to the defaut (cisco). I have to SSH into the IPS and reconfigure the password each time. Anyone know why this is happening?CheersTim

Hi all,Running ASA 5520 8.2(1)I have an interface ACL applied, with a catch all at the end for logging traffic that does not match my specific rules.    access-list dmz-in extended permit ip DMZ-NET 255.255.255.0 any log informational interval 300 I ...

Hi,question1) When would any organization want to implement a dual layered firewall? Please give example.question2) Does it make a real difference if one were to use this scenario?question3) Cannot a powerful firewall be enough in order to avoid  the...

Hi,I have a cisco ASA firewall.Outside - Connected to Internet.DMZ- Connected to servers which open up connections to the Inside zone.Inside - secure applications.Scenario 1when request from the Internet hits the firewall public OUTSIDE ip. I nat it ...

Hi everyone.. please kindly help. We are using 4240 as a IDS at the moment and are looking to enable the IPS capability in near future.   However we only have one IPS on our site. For resiliancy we have 2 entry/exit points with 1 asa at each entry po...