Network Security

I just installed a new ASA 5505 for an office with three internal subnets.  The three networks can each get online fine and ping eachother, but cannot browse to shares on the two internal networks other than their own.  How do I configure the ASA to ...

Hi Guys,I have an existing pair of PIX 515E that has two interfaces. One connected to the public internet via my ISP and one internal.I recently ran out of IP's and had the ISP route an additional block to public IP of my firewall. This isn't working...

Just wondering if there are any methods or commands, natively, in the asa5510 for determing all traffic in to and from a certain server passing through the asa.  This would be without a syslog server or something similar.

Hi,Need some help on Nat config on ASA 8.3 from Inside to DMZ.  I have a DMZ server with the IP address of 192.168.2.5.  My inside IP is 172.16.128.x/24.  I want to able to communicate or talk to server on the DMZ 192.168.2.5.  can you please help wi...

Hello,I have seen a rise of attempts to brute force our Administrator account on a awindows domain. I have in place, a Cisco ASA5505 w/ IPS sensor. I'd like to use the IPS sensor to automatically block IP's that brute force after x failed login attem...

I've setup many IPSECs on previous ASA and PIXs but I have a problem with 8.3I've used the setup wizzard and created a IPSEC rules etc and the tunnel comes up but I've noticed the way NAT excemption has changed.  I can see the two rules added by the ...

Hello experts,I have (I think) a relatively simple internet and site-to-site VPN configuration in place.  The config is meant to be very secure with only individual certain IP's, protocols etc.allowed through.  I don't mind using the same firewall ru...

Hi,Does ASA 5500 has stateless filter to drop packet even when 3-way handshake is finishedFor example,1: 3-way handshake is done2:client send data to server3:I apply a statless filter to the incoming interface to drop the packet from the clientThanks

Is it possible to setup an IPS sensor's IDM console or CLI to check ACS for user authentication rather than use local accounts on the sensor? Or is this something only the cisco works software can do?thank you, Bill

Hi allI have some NAT/access rules problem.static (inside,outside) 210.90.112.221 192.168.222.4 netmask 255.255.255.255 access-list outside_access_in extended permit tcp any host 219.90.119.237 eq 3389 access-group outside_access_in in interface outs...

When i log into the firewall i see the configuration is last modified, Even though i don't change any configuration on the Firewall.Please let me know if any one is aware of this why it happens.Thanks in advance.

I have opened up the access list, added the static route  inside,outside statement, not sure what to do on NAT.  ASA is running ASA Version 8.0(4)32 Any helpful suggestions would be appreciated.