Network Security

In large organizations where firewall policies develope over a long period of time, sometimes the result of merging rules from two or more firewall, organizational and contract chages etc; rules can get quite unmanageable. I am wondering if Cisco fir...

I'm working on a quick quote for a partner of ours.  I'm wondering if the Cisco ASA 5510 Security Plus Firewall Edition, is capable of doing a DMZ type configuration with just a single device, rather than an old school Internet -> Physical Firewall -...

We are experiencing very slow speeds when accessing the below link. We are going through a 7.2.1 525 PIX and using PAT.When I hook up a workstation "in front" of the firewall the speed is acceptable.I don't see anything in the config directly relatin...

Hi,we have a CSM server running 3.3.1 version.We are trying to add the 2 following chassis:7609S running 12.2(33)SRB5A7609 running 12.2(33)SXH6Both devices are accepting SSH and telnet connections from the CSM server. Credentials are OK.From what I s...

hii i have a question ... suppose i apply the policy to allow only http and https traffic from  router and blocking all other traffics but before allowing http traffic i list the  some of the website like "facebook" not allowing people in company to...

Hi, I have a 200 pages of configuration of ASA , and i have to map the existing configuration to the new setup. There are around 100 pages of network objects that were created during last 2-3 years. Not all of these network objects are being used in ...

Hello,I was looking for some commands to do a packet capture with Cisco PIX and ASA firewalls. I am familiar with the Juniper Netscreen debug commands but really never tried on a Cisco device.What commands does Cisco use to see real time packet captu...

i have an CSA agent 6.0.1.106 im trying to install on Server with windowns 2003 Enterperise 64 biti know the Agent installation should be done on the background but nothing seems to be installing after i check the process running on windows CSAsetup....

Hello,Has anyone had success implementing rate-limiting on the FWSM that does not impact firewall performance? I have heard that I can implement policing on the 6500, but policing does not support pps, it only supports bps, which does not help with a...

Greetings.I'm running a basic ASA 5505 with one outside interface and one inside interface (0/1). For security purposes, I'd like to lock down the inside 0/1 port to the mac address of the host that will be connecting to it. We don't want to run DHCP...

hello. My pix 525 has 3 enabled interfaces(outside,dmz,inside).I have configured it but I cannot acceed to my webserver by the inside interface. If I try with the  outside, no problem.for example, outside of my corporate, if I type www.mycorp.com, no...

hello,I have pull of IP 64 which is 25.25.25.0/26and when i use to access its on internet with 25.25.25.58 its not open. while i check NAT and ACL are all configure properly.what other reason are there ?