Network Security

Hi.I try to configure Port forwarding on a ASA 5505.Inside it's a SBS 2008 that need to be reached from the outside on port 25, 80, 443 and 987.I am using ASDM to configure, but running Packet Tracer gives an NAT error that drives me crazy. See attac...

with IOS 12.4(20)T, I am able to create network or service objects-groups.I would like to create an external network object-group meaning that it will include all outside networks and exclude all my inside private networks.I didn't found any way to s...

Problem: Cannot connect to ASDM on ASA 5505 when vlan1 network is changed from the factory default.Hi all. I am just getting started on a new ASA 5505, working it in a test lab environment. I ran thru the initial setup wizard. During that time I spec...

I have steup CS MARS v6.x to retrieve events from an ACS v4.0 server. I have a PN agent runnung on the ACS server looking at the FAILED ATTEMPTS, PASSED AUTHENTICATION, RADIUS ADMIN, and TACACS ACCOUNTING active log files. The only event that fires o...

In my office we have Traning Room and Conference room where all project people have there meeting's.we configured each project into diffrent vlan.what if vlan 2 enters the conference room and want to access vlan 2 next other project with diffrent vla...

i found an implementation of asa with failover which doesnt have a standby ip addareses configured on the interfaces. the vendor says the failover is tested and working.QUESTION: what is the impact of this kind of implementation?

As an administrator, I have my office computer defined as a static route on the management interface of my ASA. I wanted the ASA to understand that my computer is allowed for management of the ASA using the ASDM GUI.route mgmt 10.100.47.183 255.255.2...

Does anyone know if the ASA has a built in web proxy like competing products? Basically, I want to proxy all internal users and authenticate them against Active Directory. Based upon their group permissions, I want to be able to configure what kinds ...

I asked this question before and thought I had it straight, but having tried the suggested solution it is not working.Is it possible to allow Cisco VPN clients access to only certain internet IP addresses through split tunneling? I have tried using t...

If you have a concentrator with multiple active L2L tunnels, how does it know which tunnel to use when sending return traffic back to the remote end? The remote networks list? How do static routes on the box influence this?

Hi,I have a very simple config : 1x PIX 535 firewall running 6.3 and 1x 2960 ethernet switch. I am trying to get dot1q trunking working between the two, and utlize VLANs through one single physical connection. This is easy right ? But i see thousands...

Urgent helpOur ISP have black listed us due to them recieveing lots of SMTP traffice from us.We need to find out the source of the issue from the inside sending SMTP traffice to outside.Is their a way to capture smtp traffice on the ASA. and also who...

After upgrading a client from a PIX 501 to an ASA 5510, I'm having problems with the VPN and specifically the hostnames for the internal devices.Once active, the VPN on the ASA works perfectly fine by IP, but not by hostname.If I edit the hosts file ...

I find so many events listing on the sensor that report numerous events which list the source and/or destination as 0.0.0.0. In this event, the “attacker” is a known and permitted host. However, my ACLs do not permit it “any”. I have no idea ...

We configured multi-Context on 6509 FWSM. We have issue since we change the IP address of one vlan interface which is assigned as the Outside int of one context. It's interesting that ASDM shows this Outside int is down while CLI shows it's up. I hav...