Network Security

Hi Guys,I have new ASA 5520 and configured all Internet traffic natting (PAT) to 10.97.20.1, and I have inside network 10.5.5.0 will go through mpls to another site - which I wanted to nat it as 10.97.5.0, but it always translate all inside address t...

HelloHow to allow guest vlan traffic for http procotol only and limit bandwidth usage, looking for best practise implementation.Blocking peer-to-peer appliction too.In short our ASA is placed asInternet-rtr______ASA________3560_____LANOn ASA we allow...

I am rolling out a two tiered firewall design, the diagrams attached should be self explanatory. I am in a disagreement with a co-worker regarding today's best practice for this scenario. I know we've all been raised to believe mesh topology is the m...

We are planning to use a VOIP vendor by the name of LivevoxThey have sent out a questionair asking for information for the most part it is straightforward the last question has me a bit perplexed and thought I see what the community had to sayThe pla...

Hi,What is TCP intercept and TCP half connections?Explain the FTP Active and Passive Mode?Please help us to provide the information..

Platform: FWSM 3.2(18)I need to change the idle connection timeout for a specific host. I'm pretty sure the following policy will achieve this.<begin code extract>access-list CMS-TIMEOUT permit tcp any host 10.1.1.1class-map CMS-TIMEOUT match access-...

Hello Just wondering if there is support for the CSM client on WIndows 7 32-bit platform. I don't see it mentioned in any documentation even for 4.0.Is the Client supported on Windows 7 currently and if not or not so is there documentation to this en...

We'd like to configure out NAC Manager and Server to use ILO for configuration so we can separate the management from the operations piece.  Is there any documentation on how to do this?...I've looked through the NAC documentation we have on hand and...

Hi,I have one ASA 5510.I need to block certain website and torrrent sites in the ASA. But i got some documents from site. I am not see those in command in ASA 5510 version 7.X.Please help me to find out which version required for the same.Regards,Sun...

Hi all,Have been having some strange issues with our ASA5520 with CSC10 and managing director trying to download music from the itunes store to his ipod.We have two ASA5520 at different locations, one with csc 10 module the other with a aip10The unit...

Hi,Have quite an annoying problem and have not had any joy getting any solution from the vendors involved, Apple, Trend Micro, etc.Problem:Cisco ASA5520 with CSC10 Module. Base Licence. IOS and Updates All Up to dateFairly Standard configuration NAT,...

I have quite a simple set up. But for the life of me I cannot see why a rule keeps blocking my multicast traffic.(Addressing is made up)In essence I have one server that has a unicast address of 172.30.1.1/24 and it is multi-casting out on 234.1.1.1t...