Network Security

If I am on the inside of a FWSM and request a DNS record from a server on the Internet that returns multiple public IPs that are all statics on that FWSM, will the FWSM translate all of the records in the reply to their internal address or only the f...

Hi I have just come across the following issue: Sysopt seems to be missing in the 7.2(4) code? or has this change?7.2(3)ciscoasa# sh run sysopt no sysopt connection timewaitsysopt connection tcpmss 1380sysopt connection tcpmss minimum 0no sysopt nodn...

I'm setting up this scenario today and have never done that and was wondering if there are any 'gotchas' i need to watch out for, or anything any of you have done/learned while implementing this.I do have one specific question, the preshared key unde...

When allowing outbound DNS queries from a DMZ, if the DMZ is configured via DMZ access-list to allow queries to go to a specific IP Address (ISP DNS Server),Does an inbound rule need to be applied on the outside interface, or is the connection statef...

Any news on CSA 6.0? Think it was announced in May, postponed till the end of July, ????

will Cisco IPS be in the end of sale list at the end of 2008, or still cisco investment on it ?? as I see many improvements on it day by day,

Hi, I am trying to configure an ASA (8.0.3) to intercept all smtp traffic coming from a dmz greylisting smtp server and then re-write the destination ip to the inside smtp server.For example my dmz greylist smtp server has an ip of 192.168.1.25 and i...

Is it possible to Etherchannel two access links between the FWSM and another switch?

I have a PIX 525 running 6.3(1). There firewall is within my internal network and protects a server segment. I don't have a TFTP server on the "inside" side of the PIX. So the TFTP transfer has to go out the "oustide" interface to my workstation (10....

hithe problem is that remote client connected the vpn device,it's ASA5505,i can ping the PCs of inside,but i cannot ping inside interface,is it right??? if wrong,how can i access the inside interface by remote vpn client????THANKS!!!!!!!!!

i need to get license for my IPS 4255-k9 so that it can download new signatures, what can i do.

I am trying to grant access from the Internet to one single IP address but have 3 port forwarders, for some reason I cannot open these ports from the Internet, here's what I mean:here are the acl's to open the portsaccess-list outside_incoming extend...