Network Security

Hello Experts,I have been doing some reading. I will set up a Dhcp server on the inside interface of my pix.  I would like to have the DHCP Server authenticate to the Active Directory Server that is located on the DMZ.Inside --pix--dmzInside interfac...

Following situation.ASA 8.2 NAT/dns statement:static (inside,outside) tcp interface smtp 192.168.0.1 smtp netmask 255.255.255.255  dnsHow can I reflect this static in 8.3?I only do have the "interface" as the ouside IP!

/* Style Definitions */ table.MsoNormalTable {mso-style-name:"Table Normal"; mso-tstyle-rowband-size:0; mso-tstyle-colband-size:0; mso-style-noshow:yes; mso-style-priority:99; mso-style-qformat:yes; mso-style-parent:""; mso-padding-alt:0cm 5.4pt 0cm ...

Hello Dears,I have a 2 No's NAC Manager and 1 No's NAC server, Our Network is Cisco three tier:  Access> Distribution >Core. Distribution switch is doing inter vlan routing and layer 3 connecting (OSPF) between the core and the distribution and amoun...

Hello,Whenever I pathping or tracert from my PC through the firewall to other VLAN's (sub interfaces) or VPN's, where don't see the IP's appear like below, we just get  lots of *, Iguess it is just hinding itself.  Can I get this to show?If I pathpin...

Hi Folkswhat  the steps to migrate form engine-1 (ips 5.1) to engine-4 (ips-7.0) on the aip-ssm 20thank you

We'll be implementing Cisco NAC guest server for Guest Wireless users, ( Model #3310),  the question is do we need to configure separate physical interface for User authentication requests( from Wireless ) and a separate  Interface for Guest server t...

hii m configuring Asa 5510 with nat. i have some internal servers. my clients requirement is to hide the original loacl ip of servers. thats why i using static nat. so the outside world only know the real ip(x.x.x.x), then it is natted into a server ...

Hi everyone,I implemented FWSM in trnsparent mode recently, everything looks nominal however I can't get one URL https://xxxxx:2000, ( I scrumbled it for security reasons) I beleive I can use a cutomized policy to make it work( I don't know how), ple...

Is there a way to trigger stateful (or stateless) failover on ASA 55xx (8.0.3) when there's a failure on the IPS unit? I understand the fail open/fail close and its application on a single firewall, but the better solution for an IPS failure in a red...

i have 4 or so interfaces on my asaint1 - internal networkint2 - dmzint3 internetI want to allow an outbound udp port x.x.x.x from internal to dmz.how would I do that?

AAAAAARRRRGHI have a customer we are trying to demo sslvpn just simple access to a web server.  Granted the permissions areanyconnnect premium peers 2 which should include sslvpnI have made it look exactly like an 8.2 config but no luck. When I issue...

i have tried dozen of configuration examples to port forward on my Cisco 5510. here ismy scenario.i have a asa with a outside IP address of 140.32.121.5. behind this firewall i have a cisco MWR 2941 that i would like to connect to via telnet. its ins...

We upgraded to ASA IOS 8.2.4 from 8.0.2. When the commands "filter https 443 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 allow" and "filter url http 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 allow" are added the we lose internet access. We're using WebSense and command "u...