Network Security

I am in the process of migrating web services from Checkpoint to ASA. Can I NAT the source address of incoming packets destined for a web server on port 80? The intent here is to be able to migrate a webserver at a time. NAT'ing of the source address...

Hi!MY client has ERP servers and ISA servers in a single DMZ but now wants to place the ERP Servers on one DMZ (say DMZ1) without changing their IP Subnet and place the ISA Server on another DMZ (say DMZ2) and a diffrent IP Subnet. The problem is tha...

will the following NAT config on an ASA conflict?First part is for one to one NAT for inside address 172.16.1.1static (inside,outside) 192.168.1.1 172.16.1.1 netmask 255.255.255.255access-list outside_in permit tcp host 10.10.10.10 host 192.168.1.1fo...

Hi,I want to allow incoming trafic on port 444 to be NATed to an internal host. I also want to allow this traffic using ACL. Seems fairly simple but I can't figure it out.The important part of my config:xxx.xxx.xxx.xxx is my external IP address. : Sa...

is there a way to automate copying ASA config files to a tftp server?i do this for our IOS boxes ... when a config , in-house code kicks in and uses CISCO-CONFIG-COPY-MIB to grab startup-config and checkpoint it into a change treebut as far as i can ...

I am looking for a good source of info on methods to troubleshoot zone based firewalls. My main problem is getting dropped packets logged and knowing what rule is dropping them. Presently only some get logged and fewer still give a reason that I can ...

Hi all, i cannot access Nacs thru http://127.0.0.1:2002 , what could be the problem

Hi all, does the Cisco asa5520/5540 have an IPS built in, also what benefits does IPS have for security? what will be the implications if we dont have it ?

Hi,We have FWSM sitting on 6509 chassis. Currently we are passing the traffic thru Pix and we have 10 VLANS in the INSIDE zone (Trust zone). Now my question isWe need to replace PIX with FWSM as the perimeter firewall.If i deploy FWSM and push the al...

Dear Sir,We want to use SSL VPN, but Cisco document says if you enable VPN, only A/S is available. In that case only one of them is working, how can we load balance the SSL VPN connection? Is there any document to clarify this?Also, for VPN load bala...

I have configured two 1841 routers(to a branch) with vrrp on inside and outside networks. I'm trying to get a L2L vpn tunnel up to my HQ where I have a ASA5520 setup. In my asa I have made a a tunnel to the vrrp ip on the wan link on the router, but ...

Hi there..we are planning to configure port redirection on ASA i.e, any traffic on port 80 should be redirected to port 443. But one of my colleague suggested that the port redirecion would fail on ASA if there is no request/traffic/communication on ...

Hello , I wonder , is it possible to make a defence with CBAC for DoS attack and Worm traffic which is generating from the inside part of the network ? I want to protect router's WAN connection from these kind of unwanted traffic which is generated f...

Hello,I have a few routers w/ VRF-Aware IPsec tunnels. I'm wondering if I can monitor all my tunnels, from all VRFs, with a single SNMP poll? CISCO-IPSEC-FLOW-MONITOR-MIB, CISCO-IPSEC-MIB , and CISCO-IPSEC-POLICY-MAP-MIB do not give me data for the s...