Network Security

Ok here is the scenerio. I have a public IP address of x.x.x.x that is nat'd to 10.1.1.1. Traffic is sent from the ISP to 10.255.255.2 which is the WAN side of my Sonicwall. The Sonicwall then sends traffic of 10.1.1.0 to IP 172.31.0.2 which is the O...

Hello,As per new security Policy(1) any unsuccessful or successful attempts to Core Backbone switches/routers should be logged and email alert goes to Security Team(2) Any config changes including resetting of password should be logged and Email Aler...

i have two asa 5520 ios version 7.0(8) and i have configured them to work as active stand-by and lan-based but when i wrote "show failover" i found it disabled on the primary one and no replication is done.can anyone help

I noticed that our ASA firewall is showing false SYN attacks. When I look at them, I see such things as our AS400 sending print jobs to a remote facility with an IPSEC tunnel, another example is our PC's connecting to an outsourced content filtering ...

i am working at a customer site whom has an ASA appliance on either side of their DMZ. The inside perimeter ASA is first in the path from the inside networks into the dmz. Then you cross the outside perimeter ASA to get to the Internet.The inside p...

Hi Champs,I would like to know if there is any way to block traffic sourced from an ASA 5540. Basically i am seeing some snnmp authentication failures and the ip address in the message is sourced from ASA. The irony is that i do not have any snmp con...

Hi Champs,I would like to know if there is any way to block traffic sourced from an ASA 5540. Basically i am seeing some snnmp authentication failures and the ip address in the message is sourced from ASA. The irony is that i do not have any snmp con...

Does anyone knows if PIX Blade will discontinue or be replaced by a new one (similar to IPSEC SPA). We are in the process of investigating for a new project and the hardware is quite old. Most vendors are invastigating in multicore processors.

where can i find this:60-day trial license that supports signature updates that require licensingfor ASA-SSM-20???Thank for all

Hello,We currently have an ASA 5510 at one of our sites with about 3 other site-to-site VPN's connected to it for all our branch offices. I setup the Clientless SSL VPN(WebVPN) and I can access everything on the local network that the ASA is attached...

Dear Sir,I have ASA 5510 with aip-ssm 10.My issue is how to have access to the module from the lan and allow it to connect to internet. i have created a static translation: static (inside,csc) tcp 10.10.10.5 https 172.16.100.5 2000 netmask 255.255.25...

Hello,Are these config ok, as per need.But till not working except SMTPRequirement * allow SMTP traffic from outside to host 80.1.2.3* allow port 5512 from inside to outside for host 192.168.20.50* allow inside host 192.168.1.10 to communiate on port...

Is there a way to allow access to Clientless (webvpn) for some users but not to AnyConnect? We want powerusers to use AnyConnect and normal users to use the Clientless. Right now all users can access either one. We're using IAS RADIUS for authenticat...