Network Security

Hi,I'm using cut through proxy in my customer firewall. And I want to user mac-exempt for some PC to bypass authentication, but after I put PC's mac-address into mac-exempt, the PC still challenge by cut through proxy authentication.mac-list aaa_mac_...

So lets say we have the following configuration:=============================================Interface Gigabitethernet0/1nameif insidesecurity-level 100speed 1000duplex fullip address 192.168.1.1 255.255.255.0Interface Gigabitethernet0/2nameif dmzsec...

HelloQuick question on no nat-control. If we enable no nat-control on the firewall, is it possible to enable NAT on case by case basis if required?Thanks

Hello,I have a question regarding failover monitoring on the ASA5505 in an active/standby configuration.I understand that on the 5505 you create VLAN interfaces and then assign the VLANs to the 5505 switchports.  With failover configured on the 5505,...

I have the following setup:3 switches --> ISR router --> ASA --> interneti have multiple vlans on the switches and I would like to rate limit them on the firewall, so in other words192.168.1.0 --> Internet only gets 2MG (upload and download) and anyt...

Hello,I was looking into cisco's documentation to find out if there are modifications in configuration when upgrading from 7.0 to 8.0, but I didn't find really much information. I'm aware about the recommendation for flash and the recommendations if ...

We have a cisco ASA 5520 in 8.0(3) version, andwe are going to upgrade the os version. I would like to know which is the recomdable version to upgrade if this firewall is a VPN Concentrator

i have one IPS 4255 sensor and one catalyst switch. i deploy ips interface pairs and connecting two vlan 33 22. i want to learn that.the vlans (33 and 22) must be same subnet????? or different subnet at interface pairs mode???because i do same subnet...

Hi Guys, Newbie here so please be patient. :O) I have a server on a DMZ that provides a windows share to another server on the internal network. The server on the internal network checks the share every two minutes for files that may have been placed...

I migrated my pix config to the ASA config using the migration utility and I thought it was successful until I tried the cutover.  It doesn't look like it migrated any of my NAT statements.  Is that normal?  Am I missing something?  Do I have to put ...

Hi, I am trying to apply an IPS license to AIP modules and I receive the following error. "Can not upgrade software on the sensorerrSystemError-idspackagemgr:digital signature of the update file was not valid, use CCO to replace the corrupted file."I...

Hi all, appologies if this is fairly basic stuff but I am relatively new to firewalling.I have purchased a subnet of 8 private IP addresses from my ISP. 109.x.x.128/29The ISP has placed a juniper router within our data centre which is routing purely ...