Network Security

Hello,I'm configuring a asa 5510.I have a dynamic NAT rule configured:NAT (INSIDE) 1 0.0.0.0 0.0.0.0global (outside) 1 interfaceOn the interface of the outside the IP adress 192.168.1.1 is configured.With only this config the PAT translation works be...

I need to setup my firewall to allow a DMZ server to connect to a site via the URLs.  My DMZ server constantly polls a site (url) for updates and the IP addresses and subnetworks constantly change.  The company stated that this is standard practice a...

Hi,I need some technical help while configuring GET-VPN. Getting strucked while configuring this. GM's start time out from their local LAN after it goes to IDLE condition. Need to remove the crypro map from interface and back it again than it working...

I have a client that has an office with Internet connectivity to an ASA 5505.  Their subnet is 10.10.0.0/24.  Their other office is connected via MPLS and uses 192.168.0.0/24.  I cannot get the 192.168.0.0 to route to the Internet and wonder if this ...

/* Style Definitions */ table.MsoNormalTable {mso-style-name:"Table Normal"; mso-tstyle-rowband-size:0; mso-tstyle-colband-size:0; mso-style-noshow:yes; mso-style-priority:99; mso-style-qformat:yes; mso-style-parent:""; mso-padding-alt:0in 5.4pt 0in ...

Good Morning,Setting up public ip address on cisco asa5505 to allow any public ip addressusing 65.10.10.1  to conect to internal ip address.65.10.10.1 nat to 192.168.10.1However there is an implicit rule that is blocking the the external IP to connec...

Hi all,I'm looking for a contentfilter (e.g. smartfilter, websense) with user authentication through active directory with single sign on.Here why:One of my customers wants a solution the can track down URL e.g by username(reporting like AD login nam...

Hi Guys,I have an ASA 5510 (OS 7.0.2) that seperates a remote access subnet from a ecommerce subnet.What I want to implement is configuration that says, by default, NAT from the remote access subnet is not required however some specific addresses nee...

Hello,I have about 30 ASA 5505 firewalls.  I am using them to remotely connect to my Allen Bradley PLCs.  I use ports 2222 and 44818 to connect to the PLC's from different devices.  The problem I am having is that sometimes one of the ports will stop...

in the old style stateful firewall, we have:ip inspect myfw icmpip inspect myfw ftpip inspect myfw tftp......access-list ingress permit ssh from my ipaccess-list ingress permit icmp from my ipaccess-list ingress permit vpn from anywhere...interface o...

Hello,We are using 6513 chassis with sup 720. Slost 1 , 2 contains FWSMs and configured as failover .The issue is that when we try to access the primary slot fwsm byCORE-6513_SW1#session slot 1 processor 1The default escape character is Ctrl-^, then ...

Hi all, What is the recomended method to secure the access to Internet zone devices (router/switch) with public IPs?  SSH enabled to access via Internet and is configured as transport for line vty with firm owned public ip ACL, even then the sitch/ro...