Network Security

Hello all,I have an ASA 5510 with software 8.0.3 and configured a Local CA. The CA is working and I can enroll users with an certificate when they're connecting to the outside interface of the ASA. I'd like to be able to enroll users on the inside ne...

I have an ASA 5505 (running 8.0.4 code) that has to have proxyarp turned off on the inside interface due to the issue described in MS KB 888816. I am able to establish my vpn connection but I cant talk to any of my servers. When i turn proxyarp back ...

I have a pair of 5510 with SSM-10 cards(CSC). Failover is working fine, but for some reason I cannot access the CSC web interface on the Secondary unit when it is in standby. Is this by design, or is there a problem? I need to apply some license upgr...

Hello,I want to map all incomming ssh connections to an inside host. Everybody who wants to make ssh to my public IP to be routed to my local private IP. I use router 1812.what can i use? nat or port-map?Thank u!

Hello all,I'm new to the cert world and i'm studying for my ccsp now..however i have a slight confusing regarding " application firewalls" and "deep inspection firewalls" .Can anyone kindly point out the difference to me if there exists one? Thx,YB

hi all, I'm using ASA5510 and Zyxel routers to do site-to-site vpn. Because all of Zyxel routers are using ADSL(dynamic IP address). I decided to use dynamic vpn on the ASA. The serious problem is that when the tunnels have been built and then some t...

We have servers which we want to get clocking info from public NTP servers on the net.How do we configure our firewall to allow NTP traffic to pass through?

Hi, I have started to get a login problem using the ASDM. When it fires up I get "ASDM is unable to read the configuration from the ASA. Please check the configuration and your conection and try again". What I find is that if I go to "File/Clear Inte...

Hi Friends,I have 2 6509E switch with FWSM. There is 2 valn for the fwsm alsO. inside vlan 101 and outside vla 95. Outside will be the virtual connection to the MSFC for fwsm to msfc routing and on 101 vlan connects the server Farm, int gig1/1-40 on ...

It's been several years since I worked with Cisco routers, but I wanted something good for my home network. Now, when I try to deliver the configuration to the router (using the SDM application), it comes back with an error, saying "Error detected at...

is the security rule in asa 5520 follow the same style with the acl in cisco 3000 and 4000 series switch where always acl is having implicit deny(so after any deny of any type we have to put permit ip any any)

hi guys, how can i check the logs during phase 1 and phase 2 negotiations in asa v8.0?

Hi,I'm new to ASA. Need some help to config the ASA Firewall. I'll be installing an antispam in the DMZ and a new Mail Server in the Tusted. As such, need to forward port 25 from the External IP to the DMZ's AntiSpam IP plus to allow port 25 from DMZ...