Network Security

what is the command i can use inasa 5510 and 5520 to stop icmp packet of my public ip to ruin attack of DOS after certain amount of time . lets say 5 minutes i want to stop icmp service of my public ip interface3ThanksRajat

I've got a ASA5510 with an inside, outside and dmz interfaces. I'm trying to ping from the dmz to the inside interface but I can't.. (nothing else is communicating from the DMZ to the inside either, but I figured this would be the easiest thing to te...

I am doing ftp application inspection on a traffic  that matches ACL ( permit statement) src dst host.This part works  fine.However, I want to exclude group of hosts from being inspected  by my own policy and I want them to use aglobal one. I am  acc...

Hi,I was wondering if someone could help me determine the limitations of using a failover-only PIX in standalone mode. I was reading this page: http://www.cisco.com/en/US/docs/security/pix/pix61/configuration/guide/failover.html and in the Failover U...

We upgraded all our ASA's last weekend to 8.2.3.  The IPS modules were left on the version of code they were using when the ASA's were on 8.0.4.32.Since the upgrade, I am seeing something on the IPS sensors that doesnt make sense.  When looking at th...

Hello I have a problem with NAT,the original config works fine (two lines below)nat (inside) 1 10.149.0.0 255.0.0.0global (outside) 1 62.206.190.254Additional I want to NAT the inbound traffic for a customer from outside 172.16.X.X to 10.149.241.20-1...

Hello, We have a NAC OOB-L2-VG Deployment at the Central Site with VLAN Mapping and ADSSO which works just fine.As part of the project we have implemented NAC Modules on ISR routers for the branch offices; same topology but as the documentation state...

Hello Everyone,Can anyone give me IOS software Version 12.4 (23) or 12.4 (20)T ???Please its very important ...

folksi'm trying to install asdm on a vista machine (SP1) but i keep getting an errorthe installer tells me there is no java run time environment installed but i have tried installing jre-6u7-windows-i586-p & jre-1_5_0_22-windows-i586-p but i still ge...

With the below given configuration on my pix firewall, NAT is working properly and three local ip get mapped to x.x.x.43-45 public ips but PAT is not working.ip address ouside x.x.x.42ip address inside 192.168.12.1global(outside) 1 x.x.x.43-x.x.x.45g...

What should be the outcome of a "clear route" command on a fwsm that has EIGRP configured? Is this command equal to the "clear ip route" in IOS?We have two fwsm (separate chassis) configured in an active/standyby configuration.  We somehow failed ove...

Hi Folks,I want to configure a new asa 5510 with a SSM module to carry out IPS/IDS across a trunk.  At present, ssl traffic comes in from the internet  through an external firewall, down through a web switch to a CSS where the ssl terminates.    The ...