Network Security

Dear All,we are having problem as end users have a lot of spyware/walware and have illegal proxy install in the lan.One of the idea is to deny HTTPS or "CONNECT" type http, at the "inside fwsm/asa" to any ip-base url destination. Since the ip-base ur...

Hello I have two ASA 5510 in active standby configuration and it workes quite fine. When a failover occures, the secondary unit keeps active, even if the primary is healthy again. Is it possible, to *automatically* make the primary the active one, if...

Will the CSA agent 6.0.0.220 work with Linux 32 bit and 64 bit Kernels??

In the following doc:http://www.cisco.com/en/US/docs/security/asa/asa80/getting_started/asa5505/quick/guide/5505GSG.pdfPage 150 is not clear. In the example, they have test for local networks and 209.165.200.225 for remote. I am not sure what is tes...

I seem to recall having some issues with this a while back (like 5 years ago) and am curious if this is still an obstacle when configure on a ASA 5520.The ISP has given me a block of 8 IP addresses. Is there any trouble with PATing the IP addresses ...

what basic requirements are needed to allow multicast traffic through a routed(not transparent) 5505?outside users (source) are accessing inside (destination) server running multicast application.FYI, server's inside IP address uses a public IP (not ...

I am trying to configure an IPS sensor for the first time and need to configure an IP address. I am confused about what IP address to use. I am probably over thinking this, but does the sensor get an IP address in the same range as the GI0/1 IP add...

I am in the process of migrating web services from Checkpoint to ASA. Can I NAT the source address of incoming packets destined for a web server on port 80? The intent here is to be able to migrate a webserver at a time. NAT'ing of the source addr...

Hi!MY client has ERP servers and ISA servers in a single DMZ but now wants to place the ERP Servers on one DMZ (say DMZ1) without changing their IP Subnet and place the ISA Server on another DMZ (say DMZ2) and a diffrent IP Subnet. The problem is tha...

will the following NAT config on an ASA conflict?First part is for one to one NAT for inside address 172.16.1.1static (inside,outside) 192.168.1.1 172.16.1.1 netmask 255.255.255.255access-list outside_in permit tcp host 10.10.10.10 host 192.168.1.1fo...

Hi,I want to allow incoming trafic on port 444 to be NATed to an internal host. I also want to allow this traffic using ACL. Seems fairly simple but I can't figure it out.The important part of my config:xxx.xxx.xxx.xxx is my external IP address. : Sa...

is there a way to automate copying ASA config files to a tftp server?i do this for our IOS boxes ... when a config , in-house code kicks in and uses CISCO-CONFIG-COPY-MIB to grab startup-config and checkpoint it into a change treebut as far as i can ...