Network Security

Hello, all!I have a pair of cat65xx with ws-svc-fwm module installed in each. Both modules are running version 2.3(4). Failover was set up on modules.I've got following output from show failover:FWSM# sh failoverFailover On Failover unit Primary: Thi...

Hi there, I have an ASA 5510 which doesnt let the users ping the outside interface or get to the internet. I thought i have configured everything fine, but seems like something is missingI have not configured Nat or any access lists, by default the u...

i'm going to be replacing my PIX's & Concentrator soon. Since they are separate boxes, they have separate public IP's. when i consolidate them down to an ASA 5520, should i use multiple interfaces for the public side or can i get away with just using...

Hi, I have ASA firewalls from which I need logs collected from few ACL rules. logging enablelogging timestamplogging console errorslogging buffered notificationslogging trap informationallogging asdm informationallogging facility 22logging host insid...

I have imported my ASA live from the network, however i have 6 different ACLs per my interfaces...under access-rules CSM has combined them all into the LOCAL policy? How do i stop this, i want to see it broke out by ACL Name

Hi,can anyone advise on this module if its efficient as an antivirus, antispam and URL filtering services. or is it better to have those seperate, and in comparing its URL filtering capabilities to websense ? what do you think ?Thank you

Hello;I must be having a brain fart or something. I have a DMZ that I would like to allow access to the outside interface to browse the web. I've added nat (externaldmz) 1 192.168.x.x 255.255.255.0I must be missing something.

With an advanced Inspection and Prevention Security Services Module (AIP-SSM 20) for the Cisco ASA 5500 Series Adaptive Security Appliance residing at my perimeter, I am in need of choosing a solution for granting safe and secure Internet access to m...

I have hosts from inside my PIX that want to access a dmz server via it's global NAT address, not it's real dmz address. There is currently a static in place:static (dmz,outside) 1.x.x.x 172.16.1.xWill they successfully be able to reach it via the 1....

I currently have servers in DMZ3 that allow SSL VPN connection to them. The SSL authenication is to the DMZ only.I want to allow AD authenication from DMZ3 to AD directory domain that is located in the inside network.What ports need to be open to all...

Hi, During these days I am trying to understand IPS and IDS concepts. I just want to know how is different an IPS device from Firewall in the terms of traffic blocking as I know we can handle the traffic on ASA FW by using MPF then why we require IPS...