Network Security

HiCan  we block websites and messenger on Cisco ASA 5520 running code 8.2 ,  we are looking to block facebook.com , yahoo.com , twitter.com , msn messenger, yahoo messenger, google talk and messenger. All Internet traffic from users are passing via t...

We are considering adding an IPS module to our ASA 5520, but that will only inspect data as it crosses the backplane, right?So for my zone labelled "Critical-Zone", which has a number of physical Windows devices, servers, and VM's, we will still need...

Hi GuysI am not able to ping from 10.140.1.129 to 10.120.1.1 and getting following error msg on pix.Deny icmp src abc_dmz 10.140.1.129 dst inside 10.120.1.1 (type 8, code 0) byaccess-group "ACL_abcI already have access list from 10.140.1.129 to 10.12...

Could someone let me know how to setup access to an inside host (I am not doing any NAT'ing - no RFC 1918 address), which uses all Public Addresses on the inside from the outside interface using ASA IOS v8.3.  I tried (for testing only) using a "perm...

Hi all!I have a doubt:I have a Internet router with an public IP address.Behind the router i have an ASA. The connection between the router and the ASA is a private network. This looks like:(1.1.1.1)ROUTER|          (192.168.1.1)|||||          (192.1...

two pix connect by failover cable and state interface.when we connect failover serial cable , found primary unit inside/outside interface down.  state interface is ok.after we disconnect failover cable, primary unit inside/outdise interface turn up.p...

HI,how do we configure cut through ASA - that would be an equivalent of lock and key router.i meant to say - lock and key router has dynamic access-list -can we configure it in ASA?

I have just finished setting up two ASA5510s in Active/Standby Staeful failover, using the Management interface for both failover and state. Everything appears to be working well.Configurations were transferred and the "sh failover" on both accuratel...

Hi,I have a server "published" to the outside interface with a static NAT.I've set up a DMZ, and I need it to access that "published" server through it's translated address.The DMZ has a dynamic NAT rule, using the outside interface IP address.My acc...

Hi all,I have a problem getting my ASA 5520 boot properly. I first though of a flash problem and did a flash erase in ROMMON, then it brought error 15 during boot (No images found in / Error 15: File not found). I then TFTPied and image from Rommon, ...