Network Security

Hi, I am dumbfounded over this problem i have. Whenever i do a traceroute using pingplotter (uses icmp not udp), i get replies from all devices in the path but not from the ASA and our perimeter router. I understand why the ASA doesn't show but i a...

HiI am jjust seettig up an remote vpn,butg issue is that my client when asked for authentication i enter the userid/passowrd but after that the session gets disconnected.What can be the problemmI am attaching the loggs and configwhich i think related...

Dear AllI have A web server in my DMZ of network,internet----ASA----DMZThe issue is I want to give my web server and invalid ip address like 172.x.x.xbut I dont know how can I bind valid ip address into this web servermy valid ip address is 61.x.x.1 ...

Hi everybody ...Please your help and suggestions in this case.I have an Internet connection from an ISP, they gave me the fiber optic connection of 3Mbps.The ISP gave us the following information:ip address in fiber optics:   10.120.2.88 / 30.  We us...

Folks,How can I get the best performance to my Firewall?I have a ASA with 8 interfaces into a single context and 1500 lines of ACL.Is there any rule to improve more performance about ACL?For example, what's the better option, do I need to use object-...

Hello All,I am pretty new to IDSM's, just trying to learn about them.  I am working on a production network so I'm having to be pretty careful..We have 2 X 6513 with two IDSM-2 installed in each which have just been upgraded to 7.0.2.  They are all i...

We have a Serv-U FTP server in our DMZ. When it is running, we are flooded with the messagesDeny IP due to Land Attack from 192.168.1.2 to 192.168.1.2.Does anyone know what setup in the FTP server can be causing this?

/* Style Definitions */ table.MsoNormalTable {mso-style-name:"Table Normal"; mso-tstyle-rowband-size:0; mso-tstyle-colband-size:0; mso-style-noshow:yes; mso-style-parent:""; mso-padding-alt:0in 5.4pt 0in 5.4pt; mso-para-margin:0in; mso-para-...

Hi,What would be the best place to nat  in a network.Router or ASA?Router would be terminating the ISP connection and then ASA in place.As ASA doesn't have the option of PBR.Is it would be better to have it on Router.On the other hand Wanted to run I...

Folks,I have a question about NAC behavior, when i have a Ip phone connected, my workstation never goes down because even if I turn off that workstation my swichport still on Link UP state.Does anyone know how can I get around that issue?thanks a lot

Dear allI have a ip valid range from my ispI want to nat my inside users to ip vaid range with dynamic NATmy outside asa interface has one of these ip valids to see outside worldbut the other ip in my range do not belong to any devices..how is it pos...

Hi, I have Cisco PIX 515E With Cisco PIX Security Appliance Software Version 7.0(6).We are using three interfaces. One outside, second WEB(for web server) & third DB(for database server)We have published our web server and so available from public ne...