Network Security

I'm having two odd problems with a 2821 that is used as a firewall. I'll describe one of them.Every few days, I can not access a server on the internet at port 1055. Running a 'clear ip nat trans *' does not fix the issue. Strangely enough, after rel...

I'm using the Cisco VPN client to connect to a 2821. When creating traffic between the remote cisco vpn client software and the Office network which is behind the 2821, NBAR classifies the IPSEC traffic as "Unknown".I'd like to use nbar+qos to priori...

Hi, Recently whe i am trying to install the signature updates for some my IDS box using Cisco works dueing signature update on of my sensor not responded in time so i deleted the sensor from the updated list.now how can i vew my sensor in my next sig...

Hello,I have two cat6500 with FWSM in each running two security contexts (routed mode) in Active/Active failover mode.I was recently trying to add an interface for management porpuses in one of these contexts. That Vlan is already in use in the othe...

Dear Sir/MadamMy question is very simple, i'm using ASA5520 and my clients are companies and they are connection to an application in my site and i wanna force my clients to only connect using 1 pcthanks

I need to allow users coming from dmz to access my terminal server through the inside interface of PIX and connect to my ISA Server through outside interface of PIX to use Outlook Web Access. Can anybody help me?Thanks!

Hello everyone...I'm plugged into the management port of one of my ASA 5510's (serial cable). I'm wanting to save a copy of the startup config; I've got a TFTP server up, no firewalls, etc.How can I do this, seeing as I'm plugged into the serial po...

We have a new 5520 in place that is causing problems with some inbound email to us from the internet. It is casuing a "sender timeout" message on the Barracuda spam firewall.I was able to correlate the following messages from the log with the sende...

Hi;I Have a ASA 5510 on my network, which 3 networks (inside, outside, dmz). When a dmz host access a inside Host, works ok, but when a inside host try access the dmz host, the following message is displayed on LOG:Deny TCP (no connection) from hid-...

Looking into setting up a guest network. We would like to give a certain amount of our internet bandwidth to the guest network and setup DHCP on the ASA for the quest network. The guest network needs to be totally segmented from our corporate network...

Hi all,can i block P2P connections like eMule, Kazaa, LimeWire...using ASA 5540?What should the best way to do that?ThanksTauer

HiI am trying to migrate to a ASA5505 from our pix.Most of our network uses PAT on our outside interface but I have a small pool of address which I NAT to on the inside, but when I do this they are unable to VPN out to remote sites.This worked great ...

We are facing one issue here, the issue is from router to firewall interface IP i.e. inside interface ip I can ping , but not the outside IP address i.e. 122.160.225.190from out side i.e. from external network I can ping the outside interface ip of t...

Hi All, We are trying to deploy IPS inline on Software in 2821 routers. The objective of this is to demonstrate ourself on deploying IPS functionality on this routers and testing the same to verify its working.We are thinking,if we could understand ...

Can anybody help me solving this prob?ISP Router Conf:1. One Public IP2. One Private IP 192.168.2.1PIX 515E:1. External Interface (Public IP with Default GW ISP Router)2. Private IP 192.168.2.33. Mapped IP for Terminal Server ( From Public IP Range)T...