Network Security

Dear AllI have A web server in my DMZ of network,internet----ASA----DMZThe issue is I want to give my web server and invalid ip address like 172.x.x.xbut I dont know how can I bind valid ip address into this web servermy valid ip address is 61.x.x.1 ...

Hi everybody ...Please your help and suggestions in this case.I have an Internet connection from an ISP, they gave me the fiber optic connection of 3Mbps.The ISP gave us the following information:ip address in fiber optics:   10.120.2.88 / 30.  We us...

Folks,How can I get the best performance to my Firewall?I have a ASA with 8 interfaces into a single context and 1500 lines of ACL.Is there any rule to improve more performance about ACL?For example, what's the better option, do I need to use object-...

Hello All,I am pretty new to IDSM's, just trying to learn about them.  I am working on a production network so I'm having to be pretty careful..We have 2 X 6513 with two IDSM-2 installed in each which have just been upgraded to 7.0.2.  They are all i...

We have a Serv-U FTP server in our DMZ. When it is running, we are flooded with the messagesDeny IP due to Land Attack from 192.168.1.2 to 192.168.1.2.Does anyone know what setup in the FTP server can be causing this?

/* Style Definitions */ table.MsoNormalTable {mso-style-name:"Table Normal"; mso-tstyle-rowband-size:0; mso-tstyle-colband-size:0; mso-style-noshow:yes; mso-style-parent:""; mso-padding-alt:0in 5.4pt 0in 5.4pt; mso-para-margin:0in; mso-para-margin-bo...

Hi,What would be the best place to nat  in a network.Router or ASA?Router would be terminating the ISP connection and then ASA in place.As ASA doesn't have the option of PBR.Is it would be better to have it on Router.On the other hand Wanted to run I...

Folks,I have a question about NAC behavior, when i have a Ip phone connected, my workstation never goes down because even if I turn off that workstation my swichport still on Link UP state.Does anyone know how can I get around that issue?thanks a lot

Dear allI have a ip valid range from my ispI want to nat my inside users to ip vaid range with dynamic NATmy outside asa interface has one of these ip valids to see outside worldbut the other ip in my range do not belong to any devices..how is it pos...

Hi, I have Cisco PIX 515E With Cisco PIX Security Appliance Software Version 7.0(6).We are using three interfaces. One outside, second WEB(for web server) & third DB(for database server)We have published our web server and so available from public ne...

Dear Cisco Friends,I have just purchased a SSL certificate from godaddy.com - I need to replace it with the current one which is self-signed.Can you advise me where I can get notes to install the certificate? will this effect VPN in anyway or anythin...

we have a brand new ASA 5520 and i have a very basic config on it.. the issue i am having is after i reboot the damn thing, i am able to ping and traceroute through the outside interface for about a minute and then for no apparent reason, i cant hit ...