Network Security

Hello I have  3 sites and Core sites , i want to ask which better place in each site Firewall blade on 6509 switch or place central Firewall on the core sitesand applay the police on all site on this firewall .i want choose the best practical design ...

If  a host on 192.168.1.x, the inside interface tries to ping a host on 192.168.10.x (a network behind a router which is connected 6.1)The ASA returns:Jan 23 2010 10:17:58: %ASA-3-305006: portmap translation creation failed for icmp src inside:192.16...

Dear Netpros,Could any one of you explain me  what are the steps we must have on NAC Maintenance. We have NAC Contarct with one of our customer. I have to carry out the maintenance tasks this week.Thanksswami

Dear AllWe have FWSM in our orgnization. I have a firewall analyzer for analyzing the FWSM logs.The Firewall Analyzer is giving me these attacks:arp poisioning    arp    05 Dec 2009, 19:46:53    -    %fwsm-4-405001: received arp request collision fro...

When a linux system boots, the 'root' processes typically attempts to mount network drives via NFS, prior to any user login on the system. In NAC, is it sufficient to add in the User Roles->Traffic Control->Unathenticated Role allowing TCP/UDP ports ...

I have the following components, ISA Server, two standalone PIX firewalls, two internet routers (800 series)Currently only one router is being used for internet access.We now have a second internet DSL connection and want to use one connection for ex...

Hi All,there are multiple SSL clients on remote site behind the router. Router is doing nat, so they will be appeared to ASA as single public IP address. only one user can connect at a time, when second user is trying to connection, ASA disconnect th...

hi,   Im using ASA firewall behind cisco series 3640 router.   Complete setup:       Internet---- cisco router------firewall---coreswitch-----lan users.  whenever the lanusers trying to browse the internet,they can not able to do it but all the logs ...

I just recevied a second block of IP addresses from my ISP and I would to configure the cisco asa 5520 to use both.  The current set up is as follow:- interface GigabitEthernet0/0 nameif outside security-level 0 ip address 1.1.1.2 255.255.255.224 (th...

Hello,  I have a bit of a strange one. I have 2 RSV4000 used as gateway VPNs. On one of them I enabled single port forwarding 3500-->3389 on an internal ip. On the external I have a FQDN updated by dyndns. I allow remote firewall administration port ...

Hi,we have an FWSM that's using different contexts. We are using nat exemption in some of these contexts, sometimes our users in the outside can't access to the inside. This already happened in different contexts and diferents hosts. And when the pro...