Network Security

Hi, what happens when the nat table (memory !) is full on a firewall module 4.0.All traffic is stopped ? MR

when designing DMZ we usually put a dedicated L2 switch for connectivity between firewall interfaces and public servers...and we create vlans in this switch according to DMZ..what risk can be found if i create these L2 vlans in our collapsed distribu...

Hi Everyone,I currently login to a FWSM (remotely) on my network but I do not know what the chassis is. Also if I do find the chassis with a FWSM in it, I'm unablt to do the session command as this is not allowed via tacacs authorization.Any usefull ...

Hello,I'm using the LMS 3.2 on a Windows Server 2008.I've got an issue in using dcrcli with DCRCLIFILE.I correctly wrote the DCRCLIFILE.dcrclifile.txtadmin networkand I added the enviroment variable with the right value.DCRCLIFILE=c:\Program Files (x...

Hi,Admins are no longer able to initiate FTP from the Inside network to the same servers at the Outside network, once upgraded FWSM from 1.x to 4.0.x.FTP inspection in the policy map is there, as you know it is the default config.Appreciate your expe...

Hi,we have bought the CSC modules few years back and now the licence has been expired few months back. we used the CSC for only a month when we bought just to test these and after that they are left without doing anything and expires. Now we would li...

I wanted to download the CNA from the Cisco website until I ran into a few licensing agreements.Am I allowed to download the software for free? It mentioned Cisco might charge me for using the software?I do not own any equipment however I am in the C...

Hello all,I have a VPN with a vendor, but he's using the same inside networks that I am, and he apparently can't NAT on his side so I'm trying to setup dynamic NAT for his incoming and outgoing traffic on the tunnel.This is the config I've come up wi...

                  Hello All,                              I am trying to create a access-list that allows traffic from a source ip to a global destination Natted address on my firewall. The problem is the sending company does not know what port they ...

Hi All,My company only allows few protocol outbound to internet like http and https. we are not currently allowing the FTP outbound. My question is that is the FTP protocol outbound access has some flaws or any security vulnerabilities inside it? Is ...

Hi AllI Wondering if any ones has complete block traffic with encrypted Torrents.When torrents is not encrypted NBAR is recognizes torrents traffic and is easy to block them , in other way when the client torrent (like utorrent) is enabled the encryp...

Hello all,Does anybody have info when will Cisco implement Zone Based Firewall for IPv6 protocol in Cisco IOS routers?Thank you and kind regards, Marko

I have been looking at spke to spoke comms or "hairpining" for months and have posted on numerouse forums but to no avail.I have a Hub and spoke network where the HUB is an ASA Firewall version 8.2I basicaly want to allow 2 spokes to be able to commu...

Please clarify for me the exact meaning of In-band and Out-Of-Band as it applies to CAS/CAM to get a user authenticated/validated; specifically mentioning the relevance of "trusted network", "untrusted network", "'virtual gateway" etc. so I can get a...