Network Security

I have an ASA 5505 and an XP box in the DMZ.  The XP box host IIS FTP and HTTP using one NIC with two IP's.  Two public IP's are static NAT'd to the private IP's and the FTP site and HTTP site both work.  The problem is I can't browse the Internet fr...

When power goes out due to power outage and back on, the 2821 router and the ASA5510 comes back on, however, the ASA5510's SPD int shows solid green light on the left and solid amber to the right,of the port.  In the above state, hosts inside of the ...

Does anyone know if version 8.x such as 8.0.5 or 8.2.1 supports EPSV?Thanks in advance.

Hello, Could you please advise me, how to upgrade IOS on both ASA5520 working in redundant (active&standby state) state, without lost my remote vpn peers? Might be cisco has a manual for this situation , please direct me.Thanks

I am trying to block users from downloading .torrent files as another way of limiting the amount of BT traffic I am seeing on the network. I can't seem to get it to stop the files from being downloaded though.Here is the current configs I am using.**...

ASA 5520, with 7.2(1) imageThe ASA Acts as a VPN termination point for another office, connects to a similar ASA. There is an inside interface, and outside interface, and a third interface never really used. Four days ago had a configuration change, ...

We are installing NAC 4.6(1).  Just dealing right now with one profile, Dealing with device filter list.  We have a MAC address in the list that when it is seen puts the switchport in VLAN 117 (access VLAN) then when the device gets unplugged, we wan...

Hi All,I am in the process of purchasing an advance router.  Here are my requirements,1.  Support two ISP connections, with automatic fail over from the first connection to the second, and then revert back to the primary connection when it is back up...

Hey,I have a remote location ASA5505 which is connected through an IPVPN/MPLS backbone to an ASA5520. Behind the 5520 lies the DHCP server.When I debug and use capture I can see the unicast packets from the DHCP relay agent on the 5505 all the way th...

Hi all,i've got a doubt....i have to do nat identity for a /25 but 2 addresses of that /25 must be mapped:exstatic (inside,outside) udp 1.1.1.1 53 2.2.2.1 53 netmask 255.255.255.255static (inside,outside) udp 1.1.1.2 53 2.2.2.2 53 netmask 255.255.255...

Hello there,I installed NAC and cutover to production env. without changing the perfigo root certificate. This is because i had no CA server. Now i've got a win 2003 Standalone root CA Server configured. What is the impact on requesting certificate f...

I do not have a Pix to test but can someone confirm that these two configurations below are equivalent.  Thanks in advancePIX 6.3(5)outside:  1.1.1.1inside:   10.0.0.254/24dmz:      192.168.1.254/23nat (inside) 1 10.0.0.0 255.255.255.0global (outside...

Hi to all,I have a Cisco ASA 5510 & a MS Exchange 2003. I enabled OWA & access it thru https://sample.com/owa using different Internet connection.I can access it locally thru https://192.168.1.1/owa. My question is, is it posible to use the https://s...