Network Security

Good Morning.My name David I am system administrator of a company.I have a little problem with the denial of icmp from the external router.The router is a model 877, and would need a little help to cut the ping (icmp) from the outside.Enclosed is my ...

Dear ALL,a customer of mine requested security redundancy so I'd like to install two Cisco ASA5510 in failover configuration but I don't knowwhere to find the right part-numbers to place the order.Wished configuration is one active and the other one ...

There is no explicit "nat-control" command in ASA 8.3. But what's the default behavior for NAT? If there is no NAT rule matching the incoming packet, does the packet get dropped, or simply passed through as is?The 8.3 Migration document mentioned a s...

Hi Guys, I have a asa5510 and i am looking to get a 10 user SSL licence will a 5505 10 user license work?...please can someone tell me what product code i need for a 10 user SSl licence on my 5510. many thanks James

HiI have an old pix 501 here (version 4.2) and no one seems to remember the password for it. I tried a password recovery over tftp using the nppix.bin file for the 4.2 version but the pix froze after it copied the file from tftp (It displayed the Rec...

hello, anyone can help me to know about the "inspect". I need to know what apects the inspect can check (TCP, ACKS, or something like that) or what documents I can check to understand the concept better.Greetings.

Hi,I am stuck with an issue, in my office a lot users are using various download managers/accelerators etc., I want to block these kind of access.NBAR PDLM's can't help me and even I even URL blocking can't helps out.Please give a best possible solut...

I have a 5520 ASA that is used to terminate site-to-site IPSec tunnels.  Occasionally I see a high number of input errors and overruns on the inside and outside interfaces.  Both interfaces are 1 Gb/s and our Internet circuit is 100 Mb/s.  The SNMP g...

Does anyone know how to make a port forwarding from a domain name instead a IP address through the ASA 5505 (8.2)in my specific case a domani name form dyndns.best regards,

We are about to deploy a Microsoft Hyper-V High Availability cluster and I want to understand how my thinking on segregating the servers in the DMZ aligns with best practice.Each server in the Hyper-V cluster follows best practice and has a dedicated...

Hi, Can anyone explain me the difference between the three, packet drop , packet loss nad packet discard. I have an understanding on packet discards but would like to know if packet loss and packet drop are the same.Which of these can be made availab...

Hi,I have configured my ASA 8.0 as a pppoe client on the outside interface. My pppoe is getting authenticated and then getting the IP address from the router. But when i am trying to ping the default gateway its not giving me a reply. Secondly, when ...