Network Security

I have a device off the DMZ interface of the firewall (PIX\ASA) and it requires access to a number of hosts on the inside (and vice versa) on a number of ports.Does this require a NAT? ACL? Can you provide an example?

I have an ASA integrated with ACS for VPN clients to be able to authenticate with their Active Directory accounts. I need to figure out how to enable split tunneling per VPN group on the ACS. I found a doc that shows that the setting is under GROUP S...

Hello,On my ASA 5520, I have the IPS module SSM-20. I use the Cisco software Manager Express 6.2. I can see great information and also configure the IPS. I would like to know what I need to do or what software I need to set alerts. I currently have a...

Setting up a test lab with a new ASA 5540 with the AIP-SSM-20 module installed.ASA is up and running passing traffic for several workstations.AIP-SSM is installed and UP. I can open a session to the sensor through an SSH connection to the ASA, and ha...

I have an application that requires that the host clients retain their source port. The source ports range from TCP/10000-10040 and the destination server listens on TCP/12000. I need to NAT these hosts to a single IP address as well. Can I use a Dyn...

We have pair of ASA's that are running active/standby failover between them. We have a need to take one of the physical interfaces (not the one we use to connect to for management) and split it into two subinterfaces. So my question is how should I a...

Dear All,FWSM module is not getting recognized even after restart the 6509E switch.When i checked the logs its getting error saying that onlie Diagnostics detected major error.Pl find the logs for your information Module 1 has Major online diagnostic...

Dear all,can any one provide network security listto follow standardizedthanks & regards

Why and how to resolve:Unable to load congiuration from asa check connection ad reload.

I have several windows machines in my DMZ, and for DMZ machines, the default is for all outbound access to be blocked, but I want to allow the machines to get windows updates. Any suggestions on how I can do this?

Hi All,Can I use a single NAC appliance (or module on a router) and configure several different policies for different kind of users? In other words... I need my NAC CAS 3310 to apply some policies to my local users, another policies to the VPN users...

We have an ASA firewall with 3 active interfaces on it. Inside,outside,and a dmz interface. We have workstations in the DMZ that only communicate with the internet. The Sec level for this interface is 50. There is no ACL or NAT's in place as the dmz ...

Hello All,Is it possible to monitor some Site-to-site VPNs that include unmanaged devices? I tried to discover a few site to site VPNs using the wizard but it always fails with saying that CSM can only discover site to site vpn on managed devices.May...