Network Security

Hi Folkswhat  the steps to migrate form engine-1 (ips 5.1) to engine-4 (ips-7.0) on the aip-ssm 20thank you

We'll be implementing Cisco NAC guest server for Guest Wireless users, ( Model #3310),  the question is do we need to configure separate physical interface for User authentication requests( from Wireless ) and a separate  Interface for Guest server t...

hii m configuring Asa 5510 with nat. i have some internal servers. my clients requirement is to hide the original loacl ip of servers. thats why i using static nat. so the outside world only know the real ip(x.x.x.x), then it is natted into a server ...

Hi everyone,I implemented FWSM in trnsparent mode recently, everything looks nominal however I can't get one URL https://xxxxx:2000, ( I scrumbled it for security reasons) I beleive I can use a cutomized policy to make it work( I don't know how), ple...

Is there a way to trigger stateful (or stateless) failover on ASA 55xx (8.0.3) when there's a failure on the IPS unit? I understand the fail open/fail close and its application on a single firewall, but the better solution for an IPS failure in a re...

i have 4 or so interfaces on my asaint1 - internal networkint2 - dmzint3 internetI want to allow an outbound udp port x.x.x.x from internal to dmz.how would I do that?

AAAAAARRRRGHI have a customer we are trying to demo sslvpn just simple access to a web server.  Granted the permissions areanyconnnect premium peers 2 which should include sslvpnI have made it look exactly like an 8.2 config but no luck. When I issue...

i have tried dozen of configuration examples to port forward on my Cisco 5510. here ismy scenario.i have a asa with a outside IP address of 140.32.121.5. behind this firewall i have a cisco MWR 2941 that i would like to connect to via telnet. its ins...

We upgraded to ASA IOS 8.2.4 from 8.0.2. When the commands "filter https 443 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 allow" and "filter url http 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 allow" are added the we lose internet access. We're using WebSense and command "u...

Have a new ASA 5510 connected to the laptop via console. I need to load the IOS and the config from a nother ASA. I have tftp client on the laptop. Do I just need to set the inside IP to the same subnet as my laptop? Will I need a crossover cable?

Anything coming in on these ports should be redirected to 10.10.10.12, NAT Ip is 60.60.60.152. ASA 7.2 code.object-group service voip udpport-object range 5060 5090port-object range 10000 20000port-object range 8000 8200I can see how to do this with ...

Dear             I have a question about  asa and its outgoing multiple ISP traffic management. I have this situation: interface Ethernet0/0.259 description ISP2 WAN vlan 259 nameif outside2 security-level 1 ip address YYY.YYY.YYY.173 255.255.255.240...

Hello,we just bought brand new Cisco ASA 5510.We are using it in transparent mode, only for firewalling.But we have problems... This device reboots itself several times in day. ASA Version: 8.2(1)Actually throughput is around 5 Mb/s and connection nu...

Is there a way on the ASA to create a network object using the domain. For example, If I want to block all of yahoo.com, I create an ACL that blocks my source addresses from the inside network to yahoo.com, the ASA could then perform a DNS lookup for...