Network Security

I have a setup with an ASA 5505 using webvpn(running 8.0.4), running DNS. I added the DNS to the config in the ASA, and verified that it can resolve correctly. However, When i try to view shares by name using cifs, i get error contacting host or dn...

Hi,What troubleshooting steps are required to see if the traffic is passing from a specific host from internal network to DMZ or from outside to inside...

ASA5505-ROFL-(config)# packet-tracer input ROFLside icmp 172.17.171.2 8$Phase: 1Type: FLOW-LOOKUPSubtype:Result: ALLOWConfig:Additional Information:Found no matching flow, creating a new flowPhase: 2Type: ROUTE-LOOKUPSubtype: inputResult: ALLOWConfig...

I'm having a problem connecting to Terminal Servers or Remote Desktop computers from behind a PIX501.If you look at the config of the PIX501, we have incoming RDP and LPD printing which works fine. And outgoing (from LAN2, behind PIX) POP3, SMTP and ...

Hello,The users are accessing the IBM main frame via Microsoft proxy server.The url to access the contents as http://10.10.10.10/sdhtml/tn3270.htm.When the users are moving behind the FWSM, They can get only the authentication page and after that bla...

I have a cisco router with firewall IOS and internet connection,on the outside interface there is an access-list that deny anything from outside and on the inside interface there are an inspection rules..I would like to configure easy VPN client so t...

I have a couple of questions.FirstWhen I am appling an access-list "in" to the DMZ interface, how does that work? What I mean is, from the outside int to the DMZ int that would be "in" right? Also, from the inside to the DMZ, that would be "in" also ...

Hello Everyone,I have configured an ASA5510 to send all traffic to IPS like bellow as cisco doc described.access-list IPS extended permit ip any any class-map my-ips-class match access-list IPS policy-map my-ips-policy class my-ips-class ips inline f...

I have question regarding the upgrade, when we upgrade FWSM from 3.2(1) to 3.2(7) do we need to activate the license again?

The following vulnerability is showing up on systems when scanned through our PIX firewall(with all ICMP except echo-replies blocked).http://www.iss.net/security_center/reference/vuln/icmp-nofragment-lowmtu-dos.htmCan anyone explain why this would ha...

HiI have to chose between zone based vs cbac for branch office configurations. Any recommendations? I have configured cbac before and it seems simplerAlso - i notice that an outbound acl on zonebased restricting where users can go doesn't appear to b...