Network Security

I have recently come back to the world of Cisco firewalls and asked to set up a port forwardingrule for two ports to access an internal webserver from the outside on ports 8181 and 8282.I have added the rules:static (inside,outside) tcp extranet 8181...

Hi All.I'm struggling to find a definitive answer or reason for some of the configuration IPS signature statuses.What does the enabled setting in a rule actually mean in relation to retired and obsolete rules?I have lots of rules which are enabled bu...

Hi,I am looking for some solution on this.I have a public ip say a.b.c.dAnd internal host like w.x.y.zw.x.y.z1w.x.y.z2..w.x.y.z3W.x.y.z is a web server and w.x.y.z1 is ftp server.I want these to be published with single global ip address.Is it possib...

Hi all,how it is possible route some traffic in PIX based on source and destionation IPs somewhere I decide?BRgg

Hello!Which command I can understand if two Cisco ASA are configured at Active/Active or Active/Standby?Following extract the output of the command show version:Licensed features for this platform:Maximum Physical Interfaces  : Unlimited Maximum VLAN...

Hello,We have a web server that is hosting multiple sql 2005 db’s.  The web server is running on my Dmz network of my pix 515e.   I would like (if possible) to use an existing NetApp filer to host the sql db’s in a simple, cluster type setup.  The fi...

Please give me a sanity check on whether or not I need to request from the ISP a hard coated ip address in order to make the following work:ASA at headquarters and 880 router in a remote home office sitting behind a DSL modem. All I see in the docume...

Is it possible to assign a public IP address to the physical interface of a server that resides on the DMZ of a ASA 5505?I have a server requirement to avoid NAT and assign a public IP address directly to the interface.  Is this possible while the se...

I am a little green, so be nice.wondering how to get an IDSM-2 module inline on a 6509. my issue is that the traffic comes into the 6509 at layer3 (routed) so I'm not sure how the config works. (e.g. do I use a trunk, or do I have to add a in a hop s...

Hello, we need to receive alerts when the bandwidth utilization of WAN interfaces is over a treshold (about 70%) to prevent the collapse of that link. Could we implement it with netmanager software? If so, how? Thanks.Regards.

Hello, thanks in advanceI have an old pix 501 and lost the passwords - i follow the password recover tutorial from cisco, but the firewall do not work properly.First, I see the BIOS version on this screen : Cisco Secure PIX Firewall BIOS (4.2) #6: Mo...

Hi,Currenltly we are using static NAT entry more than 400 entries can i know how much xlate entry can PIX supportis there will any issue with the CPU or memoryFree memory:        88561736 bytes (66%)Used memory:        45655992 bytes (34%)-----------...

I created a one-to-one NAT statement but when I try to ping the public ip address from the outside, it won't responde. Here is the NAT statement. Any assistance would be greatly apprecaited.nat(inside) 0 access-list nonatnat(inside) 1 0.0.0.0 0.0.0.0...