Network Security

Hi,I need to create a DMZ zone in my network. One server need to be put in DMZ. I have a PIX 515E 6.3.3. It has free port to create DMZ.My plan is like1) Put a new switch for DMZ zone2) Connect it to the DMZ port3) Create a NAT for inside to DMZ with...

Hi,I've just recieved a Cisco ASA 5505 to replace my old checkpoint firewall, and I have a problem (maybe it's not really a problem) with computer objects.On my configuration, I have 4 subnets : INTERNAL : 192.168.100.0/255.255.255.0DMZ_1 : 193.XXX.X...

Hi,We came across where after reboot FW is loosing interface media-type (instead of sfp it reverts back to rj45).I have to interfaces bundled into port-channel on inside. So basically during boot am loosing connectivity.Any clue for why this is happe...

Hi,I'm using cut through proxy in my customer firewall. And I want to user mac-exempt for some PC to bypass authentication, but after I put PC's mac-address into mac-exempt, the PC still challenge by cut through proxy authentication.mac-list aaa_mac_...

So lets say we have the following configuration:=============================================Interface Gigabitethernet0/1nameif insidesecurity-level 100speed 1000duplex fullip address 192.168.1.1 255.255.255.0Interface Gigabitethernet0/2nameif dmzsec...

HelloQuick question on no nat-control. If we enable no nat-control on the firewall, is it possible to enable NAT on case by case basis if required?Thanks

Hello,I have a question regarding failover monitoring on the ASA5505 in an active/standby configuration.I understand that on the 5505 you create VLAN interfaces and then assign the VLANs to the 5505 switchports.  With failover configured on the 5505,...

I have the following setup:3 switches --> ISR router --> ASA --> interneti have multiple vlans on the switches and I would like to rate limit them on the firewall, so in other words192.168.1.0 --> Internet only gets 2MG (upload and download) and anyt...

Hello,I was looking into cisco's documentation to find out if there are modifications in configuration when upgrading from 7.0 to 8.0, but I didn't find really much information. I'm aware about the recommendation for flash and the recommendations if ...

We have a cisco ASA 5520 in 8.0(3) version, andwe are going to upgrade the os version. I would like to know which is the recomdable version to upgrade if this firewall is a VPN Concentrator

i have one IPS 4255 sensor and one catalyst switch. i deploy ips interface pairs and connecting two vlan 33 22. i want to learn that.the vlans (33 and 22) must be same subnet????? or different subnet at interface pairs mode???because i do same subnet...

Hi Guys, Newbie here so please be patient. :O) I have a server on a DMZ that provides a windows share to another server on the internal network. The server on the internal network checks the share every two minutes for files that may have been placed...

I migrated my pix config to the ASA config using the migration utility and I thought it was successful until I tried the cutover.  It doesn't look like it migrated any of my NAT statements.  Is that normal?  Am I missing something?  Do I have to put ...