Network Security

Okay this is my first try at setting up an ASA-SSM10 module. I have my ASA configured and passing traffic. I started to configure the SSM module. I got into the CLI via the ASA session command. I configured the IP address and can ping it from a PC on...

hi all,i have two isp links one is leased line with static ip and the other one is DSL with dynamic ipmy scanrio is i need to leased line to nat local host to outside to access through web and the DSL i need to use for the local user internet accessi...

How can set the static PAT and global NAT for the same host as the same timeFor example, I would like to PAT host A smtp to host B smtp while NAT host A to host C.static (DMZ,WAN) tcp A smtp B smtp netmask 255.255.255.255static (LAN,WAN) A C netmask ...

I have n ASA 5505 , asa version7.2(4).I change my isp to comcast and the only changes that were made to the configuration was the new external public ip address from the old isp external ip address.My problem is with a inside device static assigned t...

Hi Everybody,       What type of traffic should be permitted and denied on an internet facing interface with DMVPN services also running on it. I have a security ACL placed in it which blocks basic security threats and ports but i am just keen to kno...

I need to download a packet capture daily to a server. We will use the "scp" option to retrive the capture but?Can I automaticlly store a capture in flash? Or can I retrieve it from another memory location via scp?wget works but I need a secure metho...

We are using an AIM-IPS module in a 1841 and it has been working fine, however we just upgraded our broadband link and didn’t notice a increase in throughput.We were consistently getting about 16 meg download speeds and this didn’t change with the ne...

I'm having a problem with NAT , i have a Videoconference system and from site A to SIte B is all good. But when site b tries to dial site A, is not completing and in ASA logs on site B i get reverse path translation failed from DMZ to Inside. Dialing...

Hello - I'm a complete novice when it comes to configuring via the command line, but I am trying my best to learn.  We have a Cisco ASA 5505 and would like to configure it using a Cisco provided solution for URL filtering.  At this moment we only hav...

Hi,We want to use the DHCP relay service on a Cisco 5505 ASA connected trough a VPN IP_Sec site-to-site tunnel with a PIX 535. We set up te configuration as discribed in the documantation. From de remote site the ASA 5505 we can ping de DCHP servers ...

Issue: Cisco  firewalls require only one level of password i.e. the domain username  and password are used for both logging in as well as reaching global  configuration mode. Background: We  have multiple Cisco network devices set up which authentica...

Hi,I am using router now.  Did any IOS firwall or IPS command can protect like "login block-for" command to control number of login per period of time.   It is because my servers in network also week to limit number of limit (ssh) per period (say min...

Ever since i have setup 2 ASA 5520's in a failover state. i cannot telnet or ssh to either device. if i reboot them it starts to work again, but not for long. does anyone know why this is occuring?

Hello,I want to buy an ASA5510 + SSM for my lan.The goal is :- Make URL filtering/blocking within work hours- Deny some application like IM, P2P, web radio, during work hours.Trend Micro is good for the first think : url filtering by categoriesBut is...