Network Security

HiI'm looking at using a ASA 5500 to replace our aging pix. Other than normal firewall functionality, I want the unit to scan http content for malware, which I understand the Content Security Bundle provides. I also need to at least throttle an excep...

Hello Netpros,I am setting up a ASA 5510 which has a T1 and a Cable Modem connection. By default all traffic gets sent out the Cable Modem as its faster and preferred. There is also a backup floating static route to the T1 should the link die on the ...

Is it just a couple commands to put a server in a DMZ zone? HELP!Here is what i need....i have a server which needs to be access from the outside from any ip address.... and in the inside address from on the 172.16.4.0 network only.. Can it be done?I...

Hi,When i power on the ASA5510, it direct go to the ROMMON. After that i follow the procedure which from http://www.cisco.com/en/US/ts/fn/620/fn62378.html i able go to the ASA IOS, but when show version it show the image file is from tftp server afte...

-use the access-list permit tcp any anythats what the security consultant told me to put at the end of the access-list and from there find out what are the ports used and convert it to specific access-list.QUESTION: how to find the ports passed thru ...

Having a pix 506 and its look like has some but could not figure out .Every time when we out sh arp command then its reboot with out any output results.Running on following Ver 6.3 (5)

HelloI have the following problemI am working with security contexts on a FWSM installed on a cat 6500(I strongly recommend that you take a look at the topology diagram at this point)My problem is that I can't make server SIRE_APP located on DMZ_SIRE...

I have a customer with a central site and two branch office. Routing is configured on the WAN to connect all three locations. All servers and internet access are on the central site.Customer wants to install NAC appliance. Do I need a NAC apliance at...

Hello,We are planning to user VLAN pair mode using Ether channel trunks (Inline-on-a-stick) mainly to over come the lack of 10 GigE interfaces which would prevent us from adopting traditional in-line architecture for firewalls with 10 GigE interfaces...

could someone please validate that OS 8.03 does support all 5 interfaces on an ASA5510? and that an upgrade from 7.2.3 should bring over all 5 interfaces.thanks,Paul

Hey guys, this is probably a simple question but for some reason I can't find a simple answer.I'm testing out a Juniper STRM 2500 box and need to point my 4 IDS/IPS sensors to it so it can collect the data and so on. Is there a command to forward eve...

I have a setup with an ASA 5505 using webvpn(running 8.0.4), running DNS. I added the DNS to the config in the ASA, and verified that it can resolve correctly. However, When i try to view shares by name using cifs, i get error contacting host or dns ...

Hi,What troubleshooting steps are required to see if the traffic is passing from a specific host from internal network to DMZ or from outside to inside...

ASA5505-ROFL-(config)# packet-tracer input ROFLside icmp 172.17.171.2 8$Phase: 1Type: FLOW-LOOKUPSubtype:Result: ALLOWConfig:Additional Information:Found no matching flow, creating a new flowPhase: 2Type: ROUTE-LOOKUPSubtype: inputResult: ALLOWConfig...