Network Security

i have an ASA 5520 8.4(1) with following configinterface GigabitEthernet0/0 nameif WAN security-level 0 ip address 216.52.185.33 255.255.255.240 standby 216.52.185.34!interface GigabitEthernet0/1 nameif DMZ security-level 50 ip address 216.52.185.49 ...

I'm trying to track down what I believe is a false positive for Rustock Botnet sig 17363-3.  This is a "service HTTP" signature and it indicates "yes" on specify URI regex, specify header regex and specify request regex, but the regex field is blank ...

Has anybody tried to build dhcpd pools for nortel phones on an asa 5505. This is the config that I'm trying. The results I'm getting are that the pc and the phone both pull addresses from the data pool. If I switch the vlans on the trunk port, both d...

I am setting up a new ASA and I have configured it for multiple contexts. I created subinterfaces for each physical interface (including the inside and outside). All physical interfaces have been plugged into trunk ports. I have configured all with V...

we configured Netflow on C6500 and it is working , but the traffic behind FWSM is not appeared on Netflow Collector.is Netflow supported by FWSM 4.0 , if yes what is the required configuration?Thanks

hello,i've installed the ssh-Plugin ssh-plugin.080430.jar into our Cisco ASA 5510 Software 8.0(4).I've created an Entry in the Webtype ACL list and in the Bookmark List. When i connect to the ssl-VPN, i can start the ssh-Java-Aplett and enter usernam...

Our proxy/anti-smap/IPS box called PROXY is behind our Cisco ASA firewall. The PROXY is set in transparent mode. The PROXY internal ip is 1.1.1.1 (internal ip)We have the MX record for mail.domain.com with public ip 9.2.7.5 (public ip as we entered w...

Hi,How do I block this url in a ASA with http inspection? www.123.com/login/login.aspWhen I use this expression it does not work:      www\.123\.com\/login\/login\.aspthx,Marc

HelloI am trying to deploy an AIM-IPS inside a 2811 rtr. The module is seen by the rtr and I can log into the AIM-IPS module.I have followed Cisco recommendation by NOT giving the inside interface an addfress and have used ip unnumbered.I can log int...

Hi allIs there a way I can generate bandwidth reports on Cisco PIX 535 ?Mukundh

Hi Forumers'want to check out how to configure the ASA to support netflow V9, either in ASDM or CLI mode as welcome. i follow the PRTG guide it doens't seem success to make the detection on netflow activity,please adviceNoel

Hello All,         Does anyone have any idea on what training I can use to train myself on the new ACL's and NAT setup for 8.3 code and up? I am pretty comfortable with 8.2 but now that everything is leaving that code I need to get with it. I am open...

Hello,I want to restrict outgoing traffic.  Currently the deafault any, any IP allows all traffic from the inside to the outside.So I created some rules to only allow HTTP and HTTPS.  First I configured a rule to allow all DNS (TCP 53) traffic out.  ...