Network Security

Dear All,          In our Project, we are having Core Switch 6513 which included FSM Module also.. I have configured eight vlans for different application.Additionaly i configured the three different VLAN (i.e 1-inside,1-outside and 1-failover) in co...

Is it possible to get the "twiceNat" feature out of 8.0.4?  Here is the link to 8.3's twice nat.In shortAsa Inside 192.168.30.1/24Outside-- 4.4.4.4 (filler IP)DMZ network 192.168.20.1/24.DMZ connects to a router that has a 10.10.10.10, 10.10.10.20, a...

Hi All,there are two sites connected by MPLS. all the internet traffic from each site going through ASA which is connected to the internet directly. ASA has static  route  to other site through MPLS. I need to configure VPN site to site, in the case ...

hello guys can tell me some if you can block with a sa520 unloading. exe files from Internet sites or need a special license?

Dear allI have an ASA5510 installed AIP-SSM  module and need a part number for signature update license for that IPS, Which license  i shouldpurchase, If u can send me the part number, i would be thankful  to you.Thank you

dear experts, hellowhen i configure an application inspection for some protocols or applications i may use its class map  like ( ftp-map MY-FTP-CLASS) then definesome parameters in its prompts...another way i may say ( policy-map type inspect ftp MY-...

Hi Everyone,I have a cisco pix 501 sitting on our network, everything is working as should and to be honest its a great little firewall.Following a recent upgrade to some in house software we now require TCP port 2001 to be open, and im not 100% sure...

Hi,During my Demo of the NAC solution I'm having a hard time with NAC's AD SSO. I have already added the AD on the server and the status is "STARTED" but when i logged on to the machine it doesn't perform SSO. I have checked that the CAS is not liste...

Hello CommunityWhile working at a customer site today, we opened up another interface on our ASA here and named the interface WAN.  The WAN interface has a security level of 30.Currently we have a 3750 switch connected to the WAN interface with a man...

Hello,I am running a pair of fwsm 3.2(13). We have an access-list to control the aaa match authentication thru a radius server. Right now, static rules defined on the access-list to bypass authentication didn't work. Everyone is force to authenticati...

Hi,I've been troubleshooting a traceroute issue going through an ASA 5520.  Using the capture and trace function i discovered the problem was with the nat excempt rule dropping the packet. I have a nat 0 rule specifying the next hop router IP and spe...

Hello All,I am in the process of migrating from a PIX 515 running 7.2 to an ASA 5520 running 8.3 and I'm having an issue with the new NAT commands. Currently I am using PAT in the following manner:static (inside,outside) tcp 10.10.10100 41056 192.168...

I've been looking for a way to filter macs on the lan side of a 871 router.  The following works to deny a list of mac's from passing traffic.class-map match-any macfilter match source-address mac hhhh.hhhh.hhhhpolicy-map macfilter class macfilter   ...