Network Security

Greetings friends.I've got an 5510 setup for internet (static). The appliance builds the connection, tears it down, no errors.Problem I'm having is, no one can get access. I can ping and traceroute fine from the ASA to the 'net. I have a rule allowin...

Hi all,I am a fresh cisco user, i am trying to configure a cisco asa 5510 with the ASDM GUI. Actually, Eth0 is set as Outside interface (DHCP, fixed ISP Public IP) and Eth1 as DMZ interface with a Web server (ip 172.16.1.80) behind.And i don't find h...

Hey Folks,I've set up my outside vlan as so:interface Vlan2 nameif outside security-level 0 ip address dhcp setrouteI need to release the IP address that that interface got dynamicly from the ISP. Kinda like doing a "ipconfig /release" on a windows b...

How can we use NAC on thin clients.

Hello -I have a 2600 router that separates two networks and I need to setup an ACL to allow traffic from 192.168.1.0/24 to two IP Addresses, 10.13.3.10 and 10.3.10.2. The rest of the network should be accessible from the 192.168.1.x net.

Could anyone please help. I recently installed a PIX 5520 with AIP-SSM-10. I can manage the sensor just fine and am using "configuring Cisco IPS using CLI 6.0" as a reference. I recently downloaded new signatures as sig1 on my sensor. when I enable t...

My customer recently tried to upgrade their ASA5520 to ASA 8.03(12). When they did that, all FTP through the firewall ceased to function.Is there a fix or a workaround for this?

I am having some trouble getting this tested in the lab. Essentially I have two PIX 506e setup, one pretending to be the hub, and the other a spoke (outside interfaces on the same network) with a working tunnel between them. I could ping across them ...

I currently have a Cisco IPS 4240 employed inline in my Customers Network. It is inside of the border Router, and in front of the Outside Firewall which protects the DMZ.the IPS is already configured to block certain types of packets inline. I was re...

Hi,The IDS signature "SQL Query in HTTP Request" (5474:0) does not recognize all malicious SQL selects. Currently, the reg exp looks like [%]20|[=]|[+])[Ss][Ee][Ll][Ee][Cc][Tt]([%]20|[+])[^\r\n\x00-\x19\x7F-\xFF]+([%]20|[+])[Ff][Rr][Oo][Mm]([%]20|[+]...

my main network is 10.9.2.XXX i have sub networks ie. 10.2.x.x, 10.3.x.x, 10.4.x.x, and so on! if i log into the 10.9.2.x network i can go into any sub network. but if i connect my laptop to ANY sub network of course my ip gets that sub networks ip. ...

I figured it out but if you have a better solution, by all mean please do.The ISP will be changed also so the DNS record will have to change. I will configure the DMZ with the new IP range from the new ISP. Change the server IP address and the DNS re...