Network Security

I have several ports showing open on our ASA appliance when scanned by NMAP on the outside interface. However these ports are not configured open in the ACL that faces outside guarding against inbound traffic.The ports are 988, 993.Has anyone seen th...

I have some questions about "nat" "global" config and static mapping.If I have the following:interface 0/0nameif insidesecurity level 100interface 0/1nameif DMZ1security level 25interface 0/2nameif DMZ2security level 50interface 0/3nameif DMZ3securit...

We purchased the license upgrade for CS Mgr Enterprise Std-25 To Pro-50 Upgrade (CSMST-PR-U-3.2-K9) and I notice that this part number is specific to CSM v3.2, but in our end customer, the CSM's version is 3.1.1. I'd like to know if this license is c...

Hi,I'm trying to allow IPSec and L2TP VPN traffic through a IOS Zone Based Firewall. The router running the ZBF is NOT a vpn end point. It only needs to pass traffic from VPN clients behind the router to other remote routers.When I try to connect to ...

How do you physically install an ASA in transparent mode into a network? I know that the inside and outside interfaces have to be on the same network. My question is how does the firewall connect between users and servers when there is a switch that ...

I have 2811 with Advanced Security IOS 12.4.23Router is connected directly to internet. Users are translated with PAT to internet. When I enable ip inspection (ip inspect name my-ios-fw tcpip inspect name my-ios-fw udp)any file download from http slo...

I would like to know exactly what is the impact of changing the IP address of one of My ASA interfaces taking in mind that the ASA is configured for Security policies as well as Natting?

hi i have bought cisco CAS yet i didn't purchase the CAM ,is there any possibility for that CAS to work standalone in any for in any way

Hi all,How can i configure my ASA to authenticate only once to ACS. Cause i saw in my logs whenever i attempted to login to ADSM then ASA will authenticate with ACS a number of times.Thanks alot

Hi, We have a pair of CAS in in-band virtual-gateway mode in high availability mode. We are still running some tests but we have noticed that the clients are losing connectivity during the failover. * The service ip is always active (never stops resp...

Why would I upgrade from my 350 user PIX 515E to the ASA 5510? It's been recommended to my company, but I'll need to sell it to my board...

Hi, we are planning an upgrade from asa 7.2 (4) to the 8.0.4 release, is this release stable , any major issues with it?

A customer has a Cisco Pix 506e in which the fan is making some serious noise. What is the part number to replace this fan?