Network Security

Anybody have a recommendation for the best config help for ASA5505.

Hi,I have Cisco ASA5510 ,and configured the interface 0/0 as a OUTSIDE and assigned an IP address,interface 0/1 is assigned as a INSIDE and assigned an IP address,I have configured the interface 0/3 as a DMZ ,and assigned an IP address and NATTING an...

Hello all, We are presently running FWSM 2.3(3)6 and are upgrading to the 3.2 code train. My question is if we are presently running NAT exemption with plans of implementing no nat control post upgrade, are there any caveats/implications to doing...

I have an issue where a client is using the Cisco VPN client from behind a firewall. The client is on a 10.0.0.0/8 subnet, and the devices that they are trying to access are on a 10.2.128.0/24 subnet. Because the Clinet software only adds a 0.0.0.0 r...

I have a new ASA 5510. I do I get around the followng error: "ASDM unable to read the configuration from ASA"

Dear all ,I have IPS 4270 that was working fine. But since 1 week,i was not able to access IPS and was giving error when pulling the configuration from IME (kindly see the attach).Also the sensor's health shows that the status of "application failed...

Hi,when you enable SSL VPN on the outside interface, is there a way to specify :1- which ip addresses that can access this page ? (is it by ACL on the outside inteface ?2- i didn't find a max-retry lockout policy, so someone can access this page and ...

Hello Pro, command: fixup protocal smtp 25 will only let seven RFC smtp commands pass though PIX525 with 6.3. Would you please give me some advice on how to let all microsoft smtp commands pass through pix525? I have issued no fixup protocal smtp 25,...

My standby firewall automatically reboots. I have changed the Failover cable and the RAM as well. Still the issue is not arrested. Attached the log when captured during automatic reload.

I have a question about creating a rulebase for my FWSMs. We have certain subnets behind a FWSM interface that need to have outbound http access restricted so that they can reach public IPs, but not most of the private ranges. I come from a Checkpoin...

Greetings, I am configuring an ASA 5510 with firmware version 8.0(4). In my setup, I have a routable IP assigned to the outside/wan interface (security level 0) and 192.168.0.0/255.255.0.0 block on one interface (security level is 100 and name is ins...

I read the info ( see attachment )in Cisco book "Cisco ASA , PIX,FSWM Firewall handbook , 2nd Edition by David Hucaby" that for outbound operation , xlate happens before ACL (2nd line in attachemnt ). Moreover ACL uses translated IP rather than its l...

Hi,I am configuring FWSM with INSIDE and OUTSIDE interface (zones). For testing I have configured the access-list as belowaccess-list OUTSIDE permit ip any anyaccess-list OUTSIDE permit icmp any anyaccess-list INSIDE permit ip any anyaccess-list INSI...