Network Security

Hello;I must be having a brain fart or something. I have a DMZ that I would like to allow access to the outside interface to browse the web. I've added nat (externaldmz) 1 192.168.x.x 255.255.255.0I must be missing something.

With an advanced Inspection and Prevention Security Services Module (AIP-SSM 20) for the Cisco ASA 5500 Series Adaptive Security Appliance residing at my perimeter, I am in need of choosing a solution for granting safe and secure Internet access to m...

I have hosts from inside my PIX that want to access a dmz server via it's global NAT address, not it's real dmz address. There is currently a static in place:static (dmz,outside) 1.x.x.x 172.16.1.xWill they successfully be able to reach it via the 1....

I currently have servers in DMZ3 that allow SSL VPN connection to them. The SSL authenication is to the DMZ only.I want to allow AD authenication from DMZ3 to AD directory domain that is located in the inside network.What ports need to be open to all...

Hi, During these days I am trying to understand IPS and IDS concepts. I just want to know how is different an IPS device from Firewall in the terms of traffic blocking as I know we can handle the traffic on ASA FW by using MPF then why we require IPS...

I am trying to log into the IDM for my sensor. I have not logged into the IDM for a while but I have not made any changes since the last time I accessed it. Anyway the problem is when I open my browser and type in the IP of the sensor I get the login...

Hi,I use a ASA5505 as a easyvpn client to connect to a ASA5510 easyvpn server and everything is working fine. Now i want to add some security by using Individual User Authentication(IUA) on the server side with the command: group-policy EZVPN_GROUP ...

I have an ASA that, due to lack of interfaces, need to use the management ports as failover. I have a direct straight through cable between the interfaces, and this is how I am going to use in in production as well. I've got the failover working in a...

I am working with a web filtering service company that provides web filtering as a service in a cloud. I can forward web traffic to them via the normal proxy setting in my browser, but I want to be able to do it on firewall level as well, in case a u...

Hi,From a windows PC I can't tracert or pathping though different interfaces on the ASA 5520 or to the internet, is this something that can be achieved?