Hi,We like to block the porn site + few url in our IT Infrastructure. How can we achieve this with PIX 515 or Cisco ASA?If it's achievable by Cisco ASA then which edition ASA can be use ?Regards,Nilesh
I have pix 515E that a proxy server hits to go out to the internet. The issue Pix I have it set up that anything on the192.168.5.0/24 subnet gets NATTed to the public IP of 38.125.160.200 and all works find and all. The proxy server'sIP address is ...
All,I have a guest wireless subnet that's only allowed access to the outside world and that's it. A problem came up today that required a user in the company to be able to get to a hosted server on the LAN. A static nat exists for everyone on the out...
HelloDoes the ASA5510 support VRFs?Ideally we would like to have one VRF for the management traffic and another one for everything else.Maybe the ASA has an alternative to VRFs….?I’d appreciate if someone could give us some advice.Many thanks,Damian
If I configure a deny access-list on my fwsms, it seems that they just drop the packet without any response to the client. If a client wants to establish a denied connection no response occurs and the client falls into a timeout.Isn't there an option...
Is there a way within the ASA that I can block or disable the http header information obtained during external scans? Specifically the http server version 1.0 etc.
I have Cisco IPS 4240 deployed in the infrastructure.I have GRE over IPSec Tunnels accross many locations.I want to know if IPS can check for GRE Payload in case of packets flowing accross GRE over IPSec Tunnel. ( e.g. can I use signature id 1401/0-...
I have an isp that delivers an ethernet hand off with a /30 public subnet. They also provide a /28 public block for our use.They recommend;/30 => edge router => /28 => firewall => LAN (using 1 to 1 NAT & 1 to many NAT)Can we use the ASA 5...
Dear All Experts,Plz let me know what all devices(Hw & Sw) counts required to setup CCIE security LAB.I was just goin through the Blue print which shows the devices required but not mentioned the number of devices required...Other query is, do we req...
Hi,I have a inside net with adress 10.10.10.1 and a router on the inside net with address 10.10.10.2, client use 10.10.10.1 as default gw. Do the ASA support routing on the inside interface, for example routing 10.10.20.0/24 against 10.10.10.2? I fou...
Hello:I have a developer who uses a Mac and is running WinXP from within boot camp. When he attempt to establish his VPN he cannot. I dont have the error but when he looked it up it said the deny was due to a setting on the PIX not allowing connect...
packet-tracer shows ping traffic being dropped at NAT phase 7 and Result states "Drop-reason: (acl-drop) Flow is denied by configured rule"firewall has simple configuration:access-list Inside_access_in permit tcp object "source" object-group "destina...
Hello Guys..the thing is that I am trying to configure two cisco routers 2800 with a NAC module, nme-nac-k9, butthere is little information about it.....is there any document or book that could help me with that...I´ve already read and followed this ...
I have been instructed to put firewall in front of servers that connected to LAN switch. I do not manage this switch it manages by another team. All four servers are connected to separate VLAN on the switch with 1Gig speed. Server A: 10.10.5.x. Serve...
I managed to convert our old Pix config to our new ASA 5505 config, but when i take out our PIX firewall, and put in the new ASA, internet does not work. Can you please see what i done wrong? I am not an expert so please if you have a solution, be ve...
