Network Security

I have been tasked with configuring acl's to block a number of countries from accessing a particular site. Is there a way in the asa to filter by country code? If not, I am planning on creating a network object group for these ip addresses. This o...

Hi folks,I've got an issue I cant seem to nail down.I'm running FWSM in Cat 6513, ios V3.2(14).I have outside interface that is accessible. However, there is a vlan that i cant access.. heres what i have checked.1. default route (routes out the out...

Guys, your thoughts please.I need to move a production CSA6 environment to a new server (new hardware) which is using a different (new) IP adres.What is the best way to go about this? We are using a local database.Should we install the new server and...

I am running 2 pairs of Cisco ASA5510 which terminate VPNs and provide perimeter security to our business. I would like to upgrade the code to benefit from the VISTA supported SSL vpn client. Has anyone done this from 7.2.4 to 8.2 and have they fou...

Hi to all,I have this situation, my customer is using alacatel ip phones for his Ip Telephony and i already configure a Device Filter list with the MAC of the phone so the NAS can ignore its MAC and also enable the Change vlan acording to device filt...

Hi All,Two ASA 5520 firewalls running with Cisco Adaptive Security Appliance Software Version 8.0(3), are configured for active/standby failover. Firewalls are connected directly using cross-over cable.Everything was working fine.But, from past few d...

Dear all,in our environment we need to relay both dhcp and bootp over an FWSM (code version 3.2.13). Though the docs do not mention bootp (they only mention dhcp) one *could* guess from the "dhcprelay statistics" command that bootp is supported as we...

Basically, I want to know if this is possible with an ASA5510.I know in my experience, I've been able to do some internal subnet routing with the ASA's, but for some reason I can't get this one to work.Basically, I have an internal network of 192.0.0...

Is there a way to have one connection (idle) timeout set for a specific service (in this case sqlnet) that is not applied to all connections globally? Our developers are having problems with connections they feel need to remain open indefinitely...I...

Dear All,I have configured my ASA 5510 with remote VPN, I can connect from my PC to my Network through this VPN and I can ping any PC in the network BUT, I cannot telnet or open any PC in the network using Remote Desktop Connection. is these needs mo...