Network Security

HelloI have the following problemI am working with security contexts on a FWSM installed on a cat 6500(I strongly recommend that you take a look at the topology diagram at this point)My problem is that I can't make server SIRE_APP located on DMZ_SIRE...

I have a customer with a central site and two branch office. Routing is configured on the WAN to connect all three locations. All servers and internet access are on the central site.Customer wants to install NAC appliance. Do I need a NAC apliance at...

Hello,We are planning to user VLAN pair mode using Ether channel trunks (Inline-on-a-stick) mainly to over come the lack of 10 GigE interfaces which would prevent us from adopting traditional in-line architecture for firewalls with 10 GigE interfaces...

could someone please validate that OS 8.03 does support all 5 interfaces on an ASA5510? and that an upgrade from 7.2.3 should bring over all 5 interfaces.thanks,Paul

Hey guys, this is probably a simple question but for some reason I can't find a simple answer.I'm testing out a Juniper STRM 2500 box and need to point my 4 IDS/IPS sensors to it so it can collect the data and so on. Is there a command to forward eve...

I have a setup with an ASA 5505 using webvpn(running 8.0.4), running DNS. I added the DNS to the config in the ASA, and verified that it can resolve correctly. However, When i try to view shares by name using cifs, i get error contacting host or dn...

Hi,What troubleshooting steps are required to see if the traffic is passing from a specific host from internal network to DMZ or from outside to inside...

ASA5505-ROFL-(config)# packet-tracer input ROFLside icmp 172.17.171.2 8$Phase: 1Type: FLOW-LOOKUPSubtype:Result: ALLOWConfig:Additional Information:Found no matching flow, creating a new flowPhase: 2Type: ROUTE-LOOKUPSubtype: inputResult: ALLOWConfig...

I'm having a problem connecting to Terminal Servers or Remote Desktop computers from behind a PIX501.If you look at the config of the PIX501, we have incoming RDP and LPD printing which works fine. And outgoing (from LAN2, behind PIX) POP3, SMTP and ...

Hello,The users are accessing the IBM main frame via Microsoft proxy server.The url to access the contents as http://10.10.10.10/sdhtml/tn3270.htm.When the users are moving behind the FWSM, They can get only the authentication page and after that bla...

I have a cisco router with firewall IOS and internet connection,on the outside interface there is an access-list that deny anything from outside and on the inside interface there are an inspection rules..I would like to configure easy VPN client so t...

I have a couple of questions.FirstWhen I am appling an access-list "in" to the DMZ interface, how does that work? What I mean is, from the outside int to the DMZ int that would be "in" right? Also, from the inside to the DMZ, that would be "in" also ...

Hello Everyone,I have configured an ASA5510 to send all traffic to IPS like bellow as cisco doc described.access-list IPS extended permit ip any any class-map my-ips-class match access-list IPS policy-map my-ips-policy class my-ips-class ips inline f...