Network Security

Hi,We have the scenario attached in this post, where we have the same subnet (172.21.0.0/16) behind our DMZ and our management interfaces on our Cisco ASA.Supposing we can’t modify our subnets, and we want to use source routing on the ASA as below: A...

We’re planning to implement a High Availability environment with no one SPOF (topology attached)The environment consists in:2- Routers 2901 which will receive internet links2- Catalyst 3750 acting as a core cause it’ll receive a few more services.2- ...

Hi,here is the thing.I have asa 5505 that should be connected to two core switches on the inside, and two edge sw on the outside.Cores are interconnected.Edge sw are inteconnected.Since ASA 5505 do not support SPT, I guess the only way not to close t...

I have a couple quesions in regards to timeout values.  Is there a show command on the ASA to see what the default timeout values are set to for the various protocols?  If not, is there a list of them somewhere?We have our ASA in front of ISA and are...

Has anyone upgraded an ASA5520 from 7.x to 8.4 in one step? Release notes for 8.4 state that you can "...upgrade from any previous release directly to 8.4..."  I've read the previous version release notes and see the various changes in NAT etc that 8...

Hello, Cisco Support CommunityI have a problem that hopefully youve got and you can help me.The problem is that we have an ASA with a CSC module doing filtering of FTP, POP3, HTTP, SMTP, the situation is that the communication between the Agent Domai...

HelloGot a case here where users are befind a firewall, the firewall have for short inside,outside and dmz interfaces. Users access a website that is localted on the dmz network. However, the webserver have an external ip adress that is nated into th...

hello,can the cisco security manager 4.1  manage the new firewalls SA 500 ?thenks in advance.

Hello Dear'sI want to open a TAC case for CS Manager, I need a Serial number how i can find it.Thanks

how do I enable edns packets on a pix?

Hello friends,When i logged in NAC 4.7 i  get this errors:Warning: Current end entity certificate has expired or is due to expire in less than 30 days.can anybody help me for this

Hi forumers'Want to ask about conceptual network design.as we seen from the topology, router C881 will do the NAT for the traffic from public internet to internal network that reside privately.First hop will reach ASA firewall. Ethernet 0/1 is main f...