Network Security

Hello everyone, We have user that use credit card vedor services and they are charging us more because according to them we have ssl 2.0 and ssh 1 version and they are security vunerbilities.  They say if we upgrade to ssl 3.0 or ssh 2.0 then it woul...

Currently Being ModeratedRouting between dmz's and best practicesHi all Pros,                   I am looking for best practices of routing between dmzs and configuration sample. In the diagram attached, I have all my vpn routers(site-2-site, and rem...

I have a pix 501 firewall running version 6.3 at our hosting provider. Our hosting provider blocks outgoing port 25 to any servers other than their relay servers. I now have a need to use our own gateway server outside of their network. Their tech su...

Hello AllI have a group of users connected to our network that I need to authenticate.  These users are all on an easily identified subnet.There's also servers on the 'other side' that we allow.Currently we use ACLs on a 6509 switch.. where each of t...

Hello,We recently acquired the Virtual Nessus scanner and have it sitting on a server "inside" our ASA firewall. I want to verify what port(s) that the Nessus needs to go "outside" our firewall to scan other locations. Just curious if it will need a ...

Good Morning.My name David I am system administrator of a company.I have a little problem with the denial of icmp from the external router.The router is a model 877, and would need a little help to cut the ping (icmp) from the outside.Enclosed is my ...

Dear ALL,a customer of mine requested security redundancy so I'd like to install two Cisco ASA5510 in failover configuration but I don't knowwhere to find the right part-numbers to place the order.Wished configuration is one active and the other one ...

There is no explicit "nat-control" command in ASA 8.3. But what's the default behavior for NAT? If there is no NAT rule matching the incoming packet, does the packet get dropped, or simply passed through as is?The 8.3 Migration document mentioned a s...

Hi Guys, I have a asa5510 and i am looking to get a 10 user SSL licence will a 5505 10 user license work?...please can someone tell me what product code i need for a 10 user SSl licence on my 5510. many thanks James

HiI have an old pix 501 here (version 4.2) and no one seems to remember the password for it. I tried a password recovery over tftp using the nppix.bin file for the 4.2 version but the pix froze after it copied the file from tftp (It displayed the Rec...

hello, anyone can help me to know about the "inspect". I need to know what apects the inspect can check (TCP, ACKS, or something like that) or what documents I can check to understand the concept better.Greetings.