Network Security

Hi,I'm looking for feedback on best-practices approach to create a DMZ with public IP addresses.  It seems there are two options:1.Have the ISP subnet the address block and assign one of these subnets to the DMZ.  From that point forward it is simply...

I have two firewalls asa 5520 each has AIP-SSM20. I need to reimage the IPS on the secondary firewall.To avoid a failover do I need to shut off the SSM on the primary firewall. Do I need to turn off failover? What would be the way to do this to not d...

Can anyone send me the Web demo ASA5510 pix firewall GUI?Thanks,Thai

Hi everybody,I was wondering if you know, how can I get the latest pdf file of the best practices of IPS 4260 series.One client is asking us an official file in order to approve a request for change (RFC)I mean, I want to update the latest signature ...

Hi ExpertsWe got one application who's ports are unknown to be opened from inside  and outside of ASA,  For test purpose we allow permit ip  any any and it works. How do I identify the ports. Access-list is applied on inside and outside interface of...

i am confused with the requirement of the "backup interface vlan "command requirement on ASA 5505 . i read from Cisco doc that with the implementation of this command firewall blocks all through traffic on backup interface unless the default route th...

I have several Cisco 877 that I use at branch offices with IPSEC tunnels to our head office and I am trouble shooting through the syslogs when using the "ip inspect log drop" command so I can see if any traffic is being dropped over the tunnels.Altho...

Hi,Hosts on the inside interface need to initiate connections to hosts on the F5_LTM interface. The access-lists are in place its just the NAT I'm unsure of, the NAT config is at the botton of this message. If my understanding is correct  nat (Inside...

Hello Experts.I have a 4260 that is rebooting every single minute. When I access it via console I do not see anything in the console window. It is death. Before the RMA what else can I  troubleshoot?Thanks.

Hi Guys, I'm having an issue with NAC Profiler 3.1.1_18 when trying to profile servers using DNS Name. I have one collector configured to  do DNS Collection with Zone transfer enabled. If I do a search with string *.server.*, the system returns me ju...

Hello,I have a customer who has bought NAC 3315 appliance used for NAC server but they didn't buy Guest Server. Now the customer wants to install Guest Server software on NAC 3315 appliance.Actually the customer has downloaded and installed Guest Ser...

hai friends, i want to create site to site vpn between two sites but both the sites having dynamic ip.my question is ,is it possible to create site to site otherwise any other way is there ..if site to site is possible send any documentationthanks