Network Security

I have a pair of brand new 5520s I am in the middle of commisioning.  After carving out all the DMZs etc I needed I realized that I really neede another physical NIC, not just another VLAN off a configured nic.  When running a sh ver I see hte follow...

Hello everybody,I am working on some requirements from a customer which we need to provide Cisco documentation showing what they ask. In this case they are looking for a ASA 5585. For example:"The equipment should allow the establishment of security ...

Hi,I hava Cisco ASA 5520 with AIP-SSM module. I would like to have the below features with ASA installed in Transparent mode.1. Traffic shapping per user2.  Traffic shapping per IP subnet3.  Traffic shapping per ApplicationIs it possible with ASA ins...

HiCan  we block websites and messenger on Cisco ASA 5520 running code 8.2 ,  we are looking to block facebook.com , yahoo.com , twitter.com , msn messenger, yahoo messenger, google talk and messenger. All Internet traffic from users are passing via t...

We are considering adding an IPS module to our ASA 5520, but that will only inspect data as it crosses the backplane, right?So for my zone labelled "Critical-Zone", which has a number of physical Windows devices, servers, and VM's, we will still need...

Hi GuysI am not able to ping from 10.140.1.129 to 10.120.1.1 and getting following error msg on pix.Deny icmp src abc_dmz 10.140.1.129 dst inside 10.120.1.1 (type 8, code 0) byaccess-group "ACL_abcI already have access list from 10.140.1.129 to 10.12...

Could someone let me know how to setup access to an inside host (I am not doing any NAT'ing - no RFC 1918 address), which uses all Public Addresses on the inside from the outside interface using ASA IOS v8.3.  I tried (for testing only) using a "perm...

Hi all!I have a doubt:I have a Internet router with an public IP address.Behind the router i have an ASA. The connection between the router and the ASA is a private network. This looks like:(1.1.1.1)ROUTER|          (192.168.1.1)|||||          (192.1...

two pix connect by failover cable and state interface.when we connect failover serial cable , found primary unit inside/outside interface down.  state interface is ok.after we disconnect failover cable, primary unit inside/outdise interface turn up.p...

HI,how do we configure cut through ASA - that would be an equivalent of lock and key router.i meant to say - lock and key router has dynamic access-list -can we configure it in ASA?