Network Security

Im planning to rollout NAT on our network.Are there any best practices when comes to implement NAT?and where is the best place to implement NAT: on the firewall or on the Internet router?Cheers

I have an internal email server which i'm trying to allow our PUBLIC ip email gateway to talk to.My goal is only allow our public email gateway to talk on port 25 to this server on our inside network.layout....97.107.x.x  ---> {router 174.55.x.x} -->...

I would like for traffic on the lan int Vlan1 be able to talk to devices on Vlan3.passwd ML4TSrpWiO6mrF3c encryptednames!interface Vlan1 nameif inside security-level 100 ip address 192.168.0.1 255.255.255.0!interface Vlan2 nameif outside security-lev...

1. During the upgrade, it modifies by nat statements by putting in no-proxy-arp's where I don't have unidirectional stated.  This causes me to reprogram the many firewalls I have...again (I get it that upgrading to 8.3(2) did the unidirectional becau...

A customer recently purchased an ASR 1001 under the impression it could replace their old 3662 router and ASA 5505.  The ASA is configured for their SmartFilter proxy server (N2H2), and I am having a heck of a time finding any documention on how to c...

Well, I tried using the cisco configuration for ASA 5505 for blocking P2P:http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a00808c38a6.shtmlbut this configuration only is usefull with programs like Kazaa, so I try this co...

I have a new remote access vpn I am trying to configure but every time I use a extended acl since I want to only allow RDP traffic no traffice flows at all.  As soon as I change it to a standard acl it all flows fine. Thanks for and help.

Hi, thereOur ISP provider (AT&T) recently wanted to upgrade our system to WAN MPLS andfailed. The internal connections were tested ok, but the internet connection was failed.They claimed that it was the firewall PIX 515 that blocks all the internet c...

The order in the older ios was nat 0 then static.With the new ios how is the static nat treated if i have a nat (inside,outside) source staticNow I need to do some static one to one nats for some servers in the same subnet as the no nat

I Upgraded Same IOS(asa804-k8.bin) on both the ASA and configure Failover its working fine.But when we checked vpn client authentication its working on Primary ASA but for secendory ASA its giving Authentication error.When I down primary ASA its swit...

Hi folks,I have a asa5580 with multiple interfaces. To replicate me databases to another site, I mainly use two interfaces on that firewall. Those interfaces have a steady pace, around 95%. I am wondering when I should consider that the thoughput bet...

Last weekend I upgraded the ASA5510 from 8.0.4 to 8.2.4. As of Monday, I am having a problem. We are currently using a third-party spam filtering service that forwards our email to us. I have an object group setup that contains the host addresses fro...

Hi,I have a 5505 that has been running without any problems until recently.  There has not been any changes.I have a 5505 for a small business that has one web server.  The web server has a static NAT entry to an IP address and not an interface.  The...