Network Security

Helloo Friends,           I have ASA 5520 firewall with latest asdm version 8.3.           i want to block some sites like  all social networking sites, chatting sites, porn sites, proxy sites, hacking sites......          and  https:// site         ...

Hello,Is it possible for 1 firewall to configure 2 internet access, say first isp will use int e0/0 - outside, e0/1 - inside and 2nd ISP will use e0/2 - outside2 and e 0/3 -inside2 ?thank you,Edwin

Hello!I want to protect my multihomed Server using ASA 5510.The server is acting like a buffer betwen two networks;buffering data from one network and pushing it to the other.The traffic from both server interfaces should route through a respective f...

Hello,I have a Pix 506e and would like to know if it is compatible with IAD 2400?thanks

Hi, I've just upgraded a Trend Micro CSC-SSM module on a ASA 5510 8.0(4) to 6.3.1172.2 version.I configured url filtering policies for user and group in my Windows 2003 Domain, I installed 2 Domain Controller Agent respectively on PDC and BDC servers...

Hi there!,I am trying to configure an ASA 5520 with 8.3 software and i have to configure a VPN IPSec site-to-site. Trying to capture the packets i see coming the ingress interface but not coming out. So the VPN is not coming up and NAT seems not to w...

I need give the network ip pool client vpn 10.70.253.0/24, and the network in inside is 10.70.255.0/24, when I connect VPN client from internet I can reach all network in the LAN  but the segment 10.70.255.0 is imposible.How I can do a walkarround of...

what is the command i can use inasa 5510 and 5520 to stop icmp packet of my public ip to ruin attack of DOS after certain amount of time . lets say 5 minutes i want to stop icmp service of my public ip interface3ThanksRajat

I've got a ASA5510 with an inside, outside and dmz interfaces. I'm trying to ping from the dmz to the inside interface but I can't.. (nothing else is communicating from the DMZ to the inside either, but I figured this would be the easiest thing to te...

I am doing ftp application inspection on a traffic  that matches ACL ( permit statement) src dst host.This part works  fine.However, I want to exclude group of hosts from being inspected  by my own policy and I want them to use aglobal one. I am  acc...

Hi,I was wondering if someone could help me determine the limitations of using a failover-only PIX in standalone mode. I was reading this page: http://www.cisco.com/en/US/docs/security/pix/pix61/configuration/guide/failover.html and in the Failover ...

We upgraded all our ASA's last weekend to 8.2.3.  The IPS modules were left on the version of code they were using when the ASA's were on 8.0.4.32.Since the upgrade, I am seeing something on the IPS sensors that doesnt make sense.  When looking at th...

Hello I have a problem with NAT,the original config works fine (two lines below)nat (inside) 1 10.149.0.0 255.0.0.0global (outside) 1 62.206.190.254Additional I want to NAT the inbound traffic for a customer from outside 172.16.X.X to 10.149.241.20-1...

Hello, We have a NAC OOB-L2-VG Deployment at the Central Site with VLAN Mapping and ADSSO which works just fine.As part of the project we have implemented NAC Modules on ISR routers for the branch offices; same topology but as the documentation state...