Network Security

I have been tasked with configuring acl's to block a number of countries from accessing a particular site. Is there a way in the asa to filter by country code? If not, I am planning on creating a network object group for these ip addresses. This obje...

Hi folks,I've got an issue I cant seem to nail down.I'm running FWSM in Cat 6513, ios V3.2(14).I have outside interface that is accessible. However, there is a vlan that i cant access.. heres what i have checked.1. default route (routes out the outsi...

Guys, your thoughts please.I need to move a production CSA6 environment to a new server (new hardware) which is using a different (new) IP adres.What is the best way to go about this? We are using a local database.Should we install the new server and...

I am running 2 pairs of Cisco ASA5510 which terminate VPNs and provide perimeter security to our business. I would like to upgrade the code to benefit from the VISTA supported SSL vpn client. Has anyone done this from 7.2.4 to 8.2 and have they found...

Hi to all,I have this situation, my customer is using alacatel ip phones for his Ip Telephony and i already configure a Device Filter list with the MAC of the phone so the NAS can ignore its MAC and also enable the Change vlan acording to device filt...

Hi All,Two ASA 5520 firewalls running with Cisco Adaptive Security Appliance Software Version 8.0(3), are configured for active/standby failover. Firewalls are connected directly using cross-over cable.Everything was working fine.But, from past few d...

Dear all,in our environment we need to relay both dhcp and bootp over an FWSM (code version 3.2.13). Though the docs do not mention bootp (they only mention dhcp) one *could* guess from the "dhcprelay statistics" command that bootp is supported as we...

Basically, I want to know if this is possible with an ASA5510.I know in my experience, I've been able to do some internal subnet routing with the ASA's, but for some reason I can't get this one to work.Basically, I have an internal network of 192.0.0...

Is there a way to have one connection (idle) timeout set for a specific service (in this case sqlnet) that is not applied to all connections globally? Our developers are having problems with connections they feel need to remain open indefinitely...I ...

Dear All,I have configured my ASA 5510 with remote VPN, I can connect from my PC to my Network through this VPN and I can ping any PC in the network BUT, I cannot telnet or open any PC in the network using Remote Desktop Connection. is these needs mo...

I have been looking into this and I can only really find answers on how to technically achieve this, rather than whether it is necessary (or best practice).Assuming (for example)Inside 172.10.0.0 /16DMZ 192.168.10.0 /24Is there a reason why an inside...