Network Security

My IPS tells me a private-address (10.1.x.x) host in my network is the source of a virus detected at the IPS outside my ASA 5510 firewall. But all the IPS sees is the ASA's public address as source of the packet, and the destination IP. If I try to l...

How can I configure our ASA 5510 ver. 7.2(2) to prevent all smtp traffic except from our email servers (2 of them). We want to make sure that a possible virus would not be able to spam out email and then have our IP Address blacklisted. All incoming ...

Hi all I configured the IDSM to enable auto update from cisco.But auto update is not happening and i am getting the following error.Please help me to solve this problemAuto Update Statistics lastDirectoryReadAttempt = 17:15:01 UTC Mon Jun 15 2009 = R...

Hi!I have a question regarding SIP inspection in a PIX 515 running version 8.0(3).The problem is that there are two different VoIP solutions inside the network, one that require SIP inspection and one that won't work if it is enabled. Since they resi...

I have a group of individuals who I would like to give VPN access into our network (via PIX 515). The only thing I would like them to be able to do is access an AS400 which is actually outside our network (connected via dedicated T1). I don't want th...

HiI have CAM , CAS in Central, OOB,Virtual,Layer2 labI can see on CAM the access switch ports status which means that SNMP works but when a user is logged on the access switch , the user vlan is not inforced to be changed to Auth vlan and he remains ...

We have two ASAs that we had to setup with HA (Active/Active). We want to know if its possible setup both, HA and Zone Based Policy firewall.Thanks

Hi allDoes anyone know if its possible to make my cisco ASA appear as a hop when tracerouting through it, at the moment it does not do this.cheersCarl

Hi Guys,Im gettin an error from an asa 5510 but dont think anything is affected right now. Could you please give me more information on this error please? any help is appreciated. Thanks"Deny UDP, reverse path check from DMZ switch to Core Switch on ...

Just to paint a basic picture here is what we are trying to do. **DMZ and Outside Public ranges as shown are completely different** We are unable to move the inside host to DMZExampleOutside = 1.1.1.x/30 (Public Range)DMZ - (2.2.2.x/27 (Public range)...

I have syslog set to log to level 7...but I am doing a "debug sqlnet 255" to resolve an inspection issue and the debug messages only show up when I am logged into the ASA, they dont get sent to the syslog server.how can i resolve this?

Dear All,I have ASA 5510, and I want to use one Ethernet port of it as like sub-interfaces in which I want it to have two IPs.Somebody told me that I can configure something called virtual zones !consulting your expertise, how can I do this?

Hi, I would like to restrict 'config t' to user privilege level 5. Currently when I do 'sh run all privlege level all | i command configure'I can see the below privilege cmd level 15 mode exec command configurewhich I believe means only level 15 can ...

Testing a FWSM in single context mode. The MSFC is located inside. There are two interfaces. One labeled outside security level 0. Inside interface security level 100.All PC on the inside interface should be permitted outside access. I added an incom...