Network Security

We recently replace our checkpoint to cisco ASA. In our old firewall every tcp/udp ports outbound are blocked, ofcourse except for port 443 and 80. With the ASA we just started blocking all the ports outbound and I noticed that our DNS servers keeps ...

Hello,I should deploy a NAC solution consisting in a CAS, a CAM and a Guest Mgr to provide wi-fi guest access to an organization. Every server is a NAC3310 appliance.All components of the solution are going to be deployed entirely in an extranet area...

Hi all,Friends, i cofiged VPN site-to-site between ASA's... one side 5505 and other 5510... VPN is active, and works OK. but from 5505 inside hosts can not access internet and cannt PING as outside interface IP, as public outside IPs. static route ou...

Hi, I have make a object-group and add port-objects in the FW. Few ports are added in object group and an access list is also configured that is using object-group. Now I want to add a new port 9800 in object-group.object-group service Services tcpde...

Hi all,i've had a little problem with ASA conf in a multicast environment:so....sparse mode on all interface involved (routers and ASA) RP is router (are connected with ethernet interfaces ruoters andn ASA and RP in anycast).with ip pim bidir-enable ...

Hi, We are using pix 501 (Ver 6.3) and in which VPN tunnel is estlabished but the memory utilization is too high and CPU utilization is 1 to 2% only. The screenshot is attached for your reference. Thanks

When upgrading fwsm from version 2.3 to 3.2, is the running activation key" (multiple context) automatically imported into the new version?Or do I have to key the number after reboot ?Thanks for your helpFrancois

Hi ,I have a PIX 525 E in HSRP (active and standby mode)I have a trusted network attached to Inside interface of noth FW,I have REVERSE PROXY server which is also connected to the DMZ inteface of the both FW.Now my requirement is to give access to th...

I am reading a Cisco Press book on Securing Perimiter Routers. "Cisco Router Firewall Security" R.Deal @2005It gives an example of Auto Secure with a couple of humongous ACL's. One for example is for all Private Ip Source Addresses RFC 1918 blocked f...

Hi, We have around 100 users in our inside network. Can we restrict on downloading or assign bandwidth speed to users like in the way of divide bandthwidth. I want if user need to download then he wont able to take highter bandwidth except upto 15 kb...

Hi,I have ASA 5520 device.In that i have only one access list that is for the inbound connection from outside.Please find the access-list config..access-list outside_in extended permit tcp any host x.x.x.1 eq wwwaccess-list outside_in extended permit...

Hi. I am certain the issue we are experiencing is one that is very common. We have an internal spam filter [10.1.1.5] that receives all smtp traffic by being translated to 1.1.1.1 [obviously an example IP] on the Internet. Therefore, our public ma...