Network Security

Hi, I have deployed ASA 5505 into Five locations and all are connected via STS Tunnel. Now I want to know what is a next step for a Network Admin so that everything could work fine. Which of the softwares would you recommand for logs, monitoring or e...

HiI have 2 x ASA and i am trying to get a server in the DMZ asa1 to communicate to Outside asa 2.The path it takes is the following:asa1 DMZ Insideasa2 Inside OutsideBut the above does not work i dont see packets getting to Outside asa2. Is this a pr...

Office network (INSIDE) need to access lab network (OUTSIDE)---- and ----lab network (OUTSIDE) need to access office network (INSIDE)NOTE: lab network resides inside the office network but are considered "high risk", therefore they're placed on OU...

If I am on the inside of a FWSM and request a DNS record from a server on the Internet that returns multiple public IPs that are all statics on that FWSM, will the FWSM translate all of the records in the reply to their internal address or only the f...

Hi I have just come across the following issue: Sysopt seems to be missing in the 7.2(4) code? or has this change?7.2(3)ciscoasa# sh run sysopt no sysopt connection timewaitsysopt connection tcpmss 1380sysopt connection tcpmss minimum 0no sysopt ...

I'm setting up this scenario today and have never done that and was wondering if there are any 'gotchas' i need to watch out for, or anything any of you have done/learned while implementing this.I do have one specific question, the preshared key unde...

When allowing outbound DNS queries from a DMZ, if the DMZ is configured via DMZ access-list to allow queries to go to a specific IP Address (ISP DNS Server),Does an inbound rule need to be applied on the outside interface, or is the connection statef...

Any news on CSA 6.0? Think it was announced in May, postponed till the end of July, ????

will Cisco IPS be in the end of sale list at the end of 2008, or still cisco investment on it ?? as I see many improvements on it day by day,

Hi, I am trying to configure an ASA (8.0.3) to intercept all smtp traffic coming from a dmz greylisting smtp server and then re-write the destination ip to the inside smtp server.For example my dmz greylist smtp server has an ip of 192.168.1.25 and ...

Is it possible to Etherchannel two access links between the FWSM and another switch?

I have a PIX 525 running 6.3(1). There firewall is within my internal network and protects a server segment. I don't have a TFTP server on the "inside" side of the PIX. So the TFTP transfer has to go out the "oustide" interface to my workstation (10....