Network Security

Hi,can anyone say which one is better, to use acl on interfaces and apply them inbound, or outbound. i mean there are 2 strategies here , you can apply on all your interfaces inbound ACL and permit from each interface, or you can permit outbound to e...

Is it possible to setup two websense servers under "Configuration > Firewall > URL Filtering Servers" and filter traffic for different vlans to the different servers?For example, dmz traffic logged to one websense server while main network traffic is...

We have Primary PIX515 with Unrestricted License and Standby PIX515 with just Failover license in Active / Standby mode.A few days ago the Failover unit failed hardware wise.We raised an RMA and got a spare from Cisco which happen to come with with c...

Hi Team,We have fwsms in cluster mode, when we configure a new acl and press enter the cpu goes high and comes down during day time (peak hrs). When we do the same during off peak hrs no problem. FWSM Firewall Version 2.3(2)5.FWSM has fairly good amo...

Hi guys,I enabled Unicast RPF to protect my network of malicious traffic. How you can see on output of command "show ip verify statistics", show dropped packets on output interface and I would like to investigat to determine their source and whether ...

Hi,I am trying to setup a l2l VPN between an ASA 5510 (os is 8.0(4)) and a PIX 515E.Then vpn fails with the following messages :ASA (initiator): ASA(config)# Aug 26 11:56:54 [IKEv1]: Group = x.x.x.x, IP = x.x.x.x, construct_ipsec_delete(): No SPI to ...

Hi,We have a IDSM-2 system card in 6500 system. Unfortunately, we lost tracking the login/password. I have read Cisco doc# 13837. It req to know either admin username/password or service username/password to do password recovery. I do not have those ...

Hello.I have a dedicated fibre connection between 2 of our primary sites with direct routing between the firewalls at the edge of each site.Each site also has an ADSL connection for emergency internet, which I have connected to the firewalls with a f...

I am trying to establish a L2L VPN connection between a Cisco877 (spoke) and a Fortinet firewall (hub). The attached files show Cisco 877 current configuration and the result from a debug generated when I ran a test VPN with SDM application.My first ...

Hi-I've got a setup where for our outgoing internet connections, all users are PAT'd to 1 outside address. I've got a connection that needs to have multiple people use it, and the requirements from the vendor are that the clients need to have individ...

I've inherited a DMZ network that doesn't follow good security principles. Some hosts in the DMZ are dual-homed and the 2nd network connection is directly on the internal network:Internal --- ASA ----- Internal Network | | L-----------DMZ(The DMZ is ...

I need urgent or assistance with the above device. If you're welling to assist drop me a line [email protected]