Network Security

Hello,i would like to ask if there is a way to block skype supernode packets on an IPS module. The reason why i want to block these application is because when skype starts on host in my network i establishes about 100 connections all over the globe....

Hi,I'm looking for advice about the firewall ASA5510. I'm planning to get one of ASA5510 for our office in order to secure our network properly, however we have quite specific routing configuration to allow us failover to the remote location (data ce...

I just installed a new ASA 5505 for an office with three internal subnets.  The three networks can each get online fine and ping eachother, but cannot browse to shares on the two internal networks other than their own.  How do I configure the ASA to ...

Hi Guys,I have an existing pair of PIX 515E that has two interfaces. One connected to the public internet via my ISP and one internal.I recently ran out of IP's and had the ISP route an additional block to public IP of my firewall. This isn't working...

Just wondering if there are any methods or commands, natively, in the asa5510 for determing all traffic in to and from a certain server passing through the asa.  This would be without a syslog server or something similar.

Hi,Need some help on Nat config on ASA 8.3 from Inside to DMZ.  I have a DMZ server with the IP address of 192.168.2.5.  My inside IP is 172.16.128.x/24.  I want to able to communicate or talk to server on the DMZ 192.168.2.5.  can you please help wi...

Hello,I have seen a rise of attempts to brute force our Administrator account on a awindows domain. I have in place, a Cisco ASA5505 w/ IPS sensor. I'd like to use the IPS sensor to automatically block IP's that brute force after x failed login attem...

I've setup many IPSECs on previous ASA and PIXs but I have a problem with 8.3I've used the setup wizzard and created a IPSEC rules etc and the tunnel comes up but I've noticed the way NAT excemption has changed.  I can see the two rules added by the ...

Hello experts,I have (I think) a relatively simple internet and site-to-site VPN configuration in place.  The config is meant to be very secure with only individual certain IP's, protocols etc.allowed through.  I don't mind using the same firewall ru...

Hi,Does ASA 5500 has stateless filter to drop packet even when 3-way handshake is finishedFor example,1: 3-way handshake is done2:client send data to server3:I apply a statless filter to the incoming interface to drop the packet from the clientThanks

Is it possible to setup an IPS sensor's IDM console or CLI to check ACS for user authentication rather than use local accounts on the sensor? Or is this something only the cisco works software can do?thank you, Bill

Hi allI have some NAT/access rules problem.static (inside,outside) 210.90.112.221 192.168.222.4 netmask 255.255.255.255 access-list outside_access_in extended permit tcp any host 219.90.119.237 eq 3389 access-group outside_access_in in interface outs...