Network Security

Dear All,using the ASA 5510, how can I make an access list to be applied only on some client if they wants to open a specific website?Now I have this ACL:access-list testacl extended permit tcp 192.168.121.11 anybut this will be applied on ALL the tr...

Our 5510 switched to the standby unit 2 weeks ago, and since then, I have not been able to get the primary back online. The configs are identical line for line however when the primary is put back into service, dns requests from the internl servers a...

Dear Experts,I want to pass the traffic coming to the inside interface in the ASA firewall to an outside interface with the same IPs witout any Nating.Example: if traffic is coming to the Inside interface with IP: 192.168.1.11, I want this traffic be...

Dear Experts,I'm a newbie to the ASA Firewall and I want to use only one Interface,can I set two IPs for the same interface or can I use Sub-Interfaces?

Hi Guys,I am having some problem accessing the pix via console. Normally I use ssh to connect to the pix. But yesterday i was at customer site and I was trying to access the pix via console but was not successful. There are no tacacs configured and I...

We have enabled urlfilter in our office, blocking specific sites. Some users we need to exempt ffrom this blocking. Is there a way to specify IP addresses that are not affected by the urlfilter?Thanks for any help!

Hi,I'm still what I would consider a newbie to ASAs. They're the first HW firewall I've worked with and have been using them for a few months successfully. Since I know absolutely nothing about VPNs, I figured I'd give the GUI a try. First question...

I have a server that needs two nic's, a public address on one and a private/inside IP on the other. The server needs to have a public IP since the application is hardcoded to use it. Obviously, it is not secure to have a public ip of a server on th...

Hi,I want to deploy NAC at a Central site to protect the main Servers and resources from remote sites that have multiple users/contractors. The remote site will have their own DC's and the users may log in locally and make use of local file repositor...

Hi to all,in a lab enviroment i have configured a CAM/CAS solution on 3310 server and I have installed 2 pc (one windows Vista and one XP) with nac client 4.6.2.133 version.My problem is auto-remediation and manual-remediation, client get me a tempor...

Hi all,I have an ASA that is currently serving up a Public Network, I would like to limit the bandwidth. Can I does per user or per transport session. Also is there a way for me to block at layer 7.peer to peer and lime wire for example.Thanks

Our company has a Pix 501 and even though I installed it and configured it, I wouldn't say I know what I am doing. Please bear that in mind. I have two questions. One, while using the PDM to change the firewall's inside IP address, it seemed that I c...

I just recently upgraded to version 8.2 on our ASA's and can no longer see the syslog id of 106100.When checking under "syslog setup" the entry is there but has the logging level as N/A and will not allow me to change it.Any one else or how do I fix ...

I wonder if anybody tried to run ibm pcomm application over smart tunnel to connect to the mainframe. It is telnet like software. I am trying to make it work but I think I am missing something. By the way I can RDP to Wintel on the same subnet. It wo...