Network Security

I'm back again with another question.  The diagram below is the layout I'm working with.  The ASA and Bordermanger are running side by side for now until I can phase everything over to the ASA, so it makes everything a little complicated right now.  ...

Hi,I am getting the message below when trying to access a DMZ host from the inside network. I am able to ping the host but cannot established TCP sessions from inside to DMZ. I checked with packet tracer and the packet is allowed. However when trying...

  Dear All,Currently in my office i am having Cisco ASA 5510. I done port forwarding on ASA & using my public IP for accessing my Citrix Application from anywhere on internet.Now i am having another Web Based application which i want to access as sam...

Hello,In our environment, workstatios that do not conform with the requirements remain under Temporary Role until the remediation is done.In Event Logs I see that the Workstation is just under Temporary Role, but do not know why it is in Temporary Ro...

Hi,i have upgraded my pix with version 8.x and it is working , but when i try to download the old version it is giving error.kindly suggest.Directory of flash:/4      -rw-  1732        01:05:21 Jul 30 2006  downgrade.cfg7      -rw-  5103672     01:06...

I currently deny inbound port 25/SMTP for sources from APNIC, RIPE, AfriNIC & LACNIC; and permit ARIN source IPs on 25/smtp. This works really well and has reduced +99% of UCE/SPAM.Not that I don't appreciate the sincere offers, but I don't currently...

Hello everyone! i am back with another basic question. You know, it is said that the more practice you get the better you get. However, I think age was not factored into that little statement. Here is my problem. My domain controllers are not replica...

Seeing this signature firing quite a bit in the past hour.  Intially started seeing activity from ASIAPAC and Europe, Now seeing activity from the US.Told our IPS to drop packets but not alert.Anyone else seeing this signature fire ?Ron

Hi Team,We have configured Websense Fitering in ASA 5520 Firewall as follows for default Networks:url-server (inside) vendor websense host 172.*.*.* timeout 30 protocol TCP version 1filter url http 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 filter https 443 0.0...

Can someone help me out with this?  Not exactly clear on how to configure this.Basically I want my exterenal switches/routers/ASAs to forward SNMP traps to my internal syslog server.  I need the syntax for the core FW to allow the traffic to pass.For...

I would like to create the following situation on an ASA Firewall, but i can't get find a working solution on new firmware.Incomming traffic on outside interface on ip 1.1.1.1 can be tcp/443 or tcp/80.If traffic is on tcp/80 NAT to 2.2.2.1 tcp/80  if...