Network Security

I have a current ASA (5540, 8.3(2)) that is running in routedmode, doing a VPN endpoint as well as a wirewall for anotherinside network.  They use the single public IP addressthat is on the outside interface, which carries thedefault route.I want to ...

Hi All,I am proposing Remote access VPN solution to my client as per the attached diagram. However they are required IPS solution as well.So in this case i dont think i can implement the IPS with outside interface in inline mode because of the encryp...

Hi all,We have an  ASA Version 8.0(5)19 as our firewall.We are trying an cloud service on the internet and found that the ASA is removing the X-Forwarded-For on the header on the surf traffic.Is it posible to not remove the X-Forwarded-For in ASA?Reg...

Hi Experts,I am using my private network on inside interface as 192.168.90.x 255.255.255.0 & I recevied 4 ips 172.16.1.20 , 172.16.1.22, 172.16.1.54,172.16.1.10 from My client.Now I want to nat . Please tell me what would be the nat statement.Thanks ...

Hi,I have 10 different segments in ASA 5520, so i created 10 VLAN in ASA & made the inside interface as Trunk that connects with core switch. Now i need to run OSPF in the ASA..Is this possible? & How??

Hi!I'm looking fot a way to do static URL blocking with ASA and when the URL is blocked present a "Web Page" to the user saying that it's been blocked.So, i was wondering if i can use the http parameter "spoof server string" to replace the original U...

Hi,We ave 2 6509 switchs configured in VSS mode with a FWSM module in each switch. We have also a licences of 20 contexts for each FWSM module.I've read that in the release software 4.0(4) of the FWSM, the integration and deployment of FWSM in a VSS ...

Scenario - A firewall with 3 interfaces inside(172.30.1.0/24), dmz(17216.1.0/24)., outside(200.200.1.0/24).  A static NAT is created for DMZ server (172.16.1.10) to  public IP (200.200.1.10)static (dmz, outside) 200.200.1.10 172.16.1.10 netmask 255.2...

Does anyone have a working sample of an applet using  action msg $_syslog_msg in an EEM Applet, where the syslog message produced comes out in a single line?I'm running IOS 12.4(24)T5 on an 1841 using the applet shown below and it produces 2 lines of...

Hello,We have ordered a new Cisco Iron Port Web Security Appliance. I want to do transparent redirection of all clients  for  http and https traffic to Iron Port.So that reason i wanna configure WCCP on FWSM. My Iron port is connected to 6500 Core in...

I will be installing a 10Gb Ethernet direct Internet access circuit, of which we will be using between 1-3 Gbps on average.  We will have a set of static public IPs routed to the WAN IP address.  The application we will be supporting is a HTTP based ...

Hello,I cannot apply the port redirection in my Cisco ASA 5505 with ASA Version 8.2(1).I did all others port redirection, but when i apply the redirection for HTTPS i received the following error message ""unable to reserve port 443 for static PAT.""...