Network Security

Please give me a sanity check on whether or not I need to request from the ISP a hard coated ip address in order to make the following work:ASA at headquarters and 880 router in a remote home office sitting behind a DSL modem. All I see in the docume...

Is it possible to assign a public IP address to the physical interface of a server that resides on the DMZ of a ASA 5505?I have a server requirement to avoid NAT and assign a public IP address directly to the interface.  Is this possible while the se...

I am a little green, so be nice.wondering how to get an IDSM-2 module inline on a 6509. my issue is that the traffic comes into the 6509 at layer3 (routed) so I'm not sure how the config works. (e.g. do I use a trunk, or do I have to add a in a hop s...

Hello, we need to receive alerts when the bandwidth utilization of WAN interfaces is over a treshold (about 70%) to prevent the collapse of that link. Could we implement it with netmanager software? If so, how? Thanks.Regards.

Hello, thanks in advanceI have an old pix 501 and lost the passwords - i follow the password recover tutorial from cisco, but the firewall do not work properly.First, I see the BIOS version on this screen : Cisco Secure PIX Firewall BIOS (4.2) #6: Mo...

Hi,Currenltly we are using static NAT entry more than 400 entries can i know how much xlate entry can PIX supportis there will any issue with the CPU or memoryFree memory:        88561736 bytes (66%)Used memory:        45655992 bytes (34%)-----------...

I created a one-to-one NAT statement but when I try to ping the public ip address from the outside, it won't responde. Here is the NAT statement. Any assistance would be greatly apprecaited.nat(inside) 0 access-list nonatnat(inside) 1 0.0.0.0 0.0.0.0...

I have a question concerning the stateful failover interface.  I'm reading through the 8.0 guide, and i came across this blurb concerning the interface for failover:Use the following failover interface speed guidelines for Cisco PIX security applianc...

Hi guys,I'd like to know if it is possible to use both NAT overload to provide clients with internet access with 1 static global IP and at the same time use a static NAT translation to publish port 80 to a specific web server on the LAN so that it is...

Hi,On FWSM running 3.2 OS, the sysopt connectione tcp sack-permitted is enabled by default.  Because of the tcp randomization that is enabled too by default the tcp selective acknowledge feature is not usefull.  I'm planning too disable the tcp-sack ...

Hello all,I have a lan2lan vpn on an ASA 5520 and am trying to limit the bandwidth of this tunnel going outside.I have created the following configuration, but it is not working:class-map 1.1.1.1_CM match tunnel-group 1.1.1.1 match flow ip destinatio...

How can we upgrade the ips module ? I need to add the known host (scp server) to the ips module but I couldnt. How can I add this host manually? It cannot retrive from the server automatically... It asks for public exponent.Thanks

Hello,I am currently setting up a few switches and one configuration point is to secure acccess via telnet from only certain IP'sI have created the access list as shown below :access-list 20 permit 192.168.1.0  0.0.0.255 access-list 20 permit 10.44.1...

I have the following network as shown. I seem to have some problems configuring routes for the ASA 5510.I need hosts on 194.1.10.0/24 network (HEADQUATER) to be able to ping the hosts on 194.1.20.0/24 (BRANCH). But hosts on the headquater network can...

i. How often should I upgrade the ASDM and ASA software?I am confused by the versions on the downloads section of the CISCO website - do I pick the latest version without an ED for stability?ii. Is there a correct order? DO I updgrade the ASDM softwa...