Network Security

Hello,I'm not new to cisco but i am new to firewalls and ASA.right now i have a test bed set up to test this netflow software (manageengine if that matters)I have 2 2800 series routers and 1 ASA 5505 (8.2(1) )I have it like this_pc 192.168.2.2/1_____...

This link has a good example on how to configure CISCO IOS Content Filtering http://supportforums.cisco.com/docs/DOC-8028i copied and pasted the config on to a 1941W router and it worked.  however, i found that the router could go in and out of the "...

Hey there!If i was to give someone a config to paste into an ASA, i need to know where its going to error out. For instance, where do i put my end statements and config t statements...i dont want anything to error on the pasting of this config.... He...

hi everyone,              I want to restore the backup of startup-config from old ASA 5520 to new ASA 5520. I was told that if I restore the backup all the password would not be restored and therefore I will have to maunally type each every passwords...

Hi I'm having some trouble understanding why the following does not work:access-list nat_someserver_inside extended permit tcp host real_host host target_host eq smtpaccess-list nat_someserver_inside extended permit tcp host eq https any static (insi...

I am having an unusual issue.  I think I set up the zone security correctly to permit any IP from the out-zone to connect to the router via SSH and HTTPS, but my connections from the out-zone just time out.  The relevant portions of the config is att...

I am trying to Resolve an email issue.  I have a hosted email server that users connect to using Outlook and Outlook express.  The ISP for most of the clients recently made a change that blocks outbound 25 traffic.  They only allow SMTP over port 587...

HiI am facing a starnge problem .I have attached the diagram that i could make best.Now problem is that:I can ping from 172.16.15.0 > 10.10.16.0/24( all the IP address)I can ping from 172.16.15.0(any ip) > 10.10.16.22 ( single ip pass )I can ping fro...

Hi,I am getting lots of High Alert of AD -External TCP Scanner... on the Action Taken tab I am seeing "denyPacketRequestedNotPerformed". I want to know what this messages mean.The Signature fires on  victim port 445. In my case, All the attackers [wi...

We have just installed an NME-IPS into our 3825 head-end router which connects all of our remote sites.  We have an access list applied on the serial interface to block certain traffic coming from the remote sites.  With the installation of the NME-I...

I have 1 external IP address that is used for incomming mail.  That address is pointed via static to my Barracuda web filter.  My xchange server falls under the standard dynamic nat policy.  One some domains I have been getting NDR bounce backs becau...

my exchange fo is in the DMZ 192.168.1.25 and it has an external ip of 209.X.X.XI want my iphone users to be able to hit the external IP from inside my network. my asa /security kung fu is not strongHow can I let traffic from my inside int to the ext...

Greetings-   I put in an enable password in the encrypted format in a 515, watched it go in, I also have a capture of the session.  However, when I try to use it to log in, I can not. Am I doing something wrong?

Looking at the ASA5520 firewall I am seeing a number of messages saying :%ASA-4-450001: Deny traffic for protocol 6 src inside:ip/3924 dst outside:ip/80, licensed host limit of 10 exceededI was under the impression this only applies to the 5505.does ...