Network Security

I am in the process of migrating our existing IP subnet from a /29 to a /27.Is there a way to assign the new /27 IP addresses to the same outside interface on my 5505 as the existing /29 and run them parallel while I transfer DNS for www, smtp, etc?

Hello - I have a list of 'ports to open' on our ASA5510 to allow traffic to/from a remote site who will be hosting an application our users need to access.  There are 9 ports total, so should I use a Service Group?  If so, should I select only 'TCP' ...

Got an interesting scenerio.  I have a DMZ that has some public facing serves that are a part of a windows domain.  We are trying to get these machines to register dns records dynamically.Long story short, we found that when the fixup DNS is enabled,...

I am starting to work with an ASA 5505 ... I have a Cisco CallManager on the network inside the ASA and a network outside in the ASA, IPS settings and paths are perfect and that I can ping both outside and inside networks. when I connect an IP phone ...

Hi,I was wondering what it means when the action field in an event detail screen says: "shunRequested+denyPacketrequestedNotPerformed". Does that mean the configured response to an event wasn't executed? If so, how can I find out why? I was also wond...

Ok so I got a complaint from our public agency which acts as our "ISP" that their IDS system detected a host(s)(in our network) showing malicious activity, connecting outbound to an Internet IP of 94.100.25.138 over port 4723.  I did some research an...

We have some Iegacy alias commands in our current ASA 5520 config for the dmz servers. The DMZ servers are not accessible from the outside - Does 8.3 support the alias command?

I need to uninstall the 4.8 NAC agent from a Mac running OS X 10.6 so I can downgrade to the 4.7.3 agent for testing.  When I follow the instructions in the documentation for components to delete in order to uninstall the client, then I reboot and st...

I recently began work on an ASA 5510 for a customer and have encountered a problem with Console Port output that I have never experienced before.  Due to the fact that my laptop (like most current models) lacks a built-in native COM port, I use a USB...

guys,We've problem with signature IPS in our idsm2, my customer is Banking company,they want to develop application banking based on ip, the application need to open and allowing port tcp 6070 and 7007is there any signature ID that's inspect the traf...

Hi,      Please help on creating Zones on ASA5580 , if anyone could refer some doc on this as i am new to ASA.regardsNeo

Hello,i got complient from our ISP that their was Unauthorized Access Attempts from IP 38.111.111.1 (firewall IP). The ISP is saying they got complient address 38.111.111.1  conducting scanning/hacking NT known exploits, port scanning and/or spiderin...