Network Security

I currently am NAT'ing all RFC-1918 addresses out the firewall to the Internet. However, I want outgoing mail to appear to originate from a different IP.So, 10.0.0.1 NATs out as 1.1.1.5010.0.0.2 (a mail server) should browse Internet appearing to be...

We've got a small company with about 50 employees. Currently we are about to upgrade our Internet connection to Metro Ethernet and along with that are looking at replacing our Linux based firewall with an ASA 5510. The question however is what soluti...

hellowe have 2 5550 ASAs in active-standby mode - please see attached diagram. the ASAs LAN Failover, Stateful Failover and Inside interfaces all physically connect into Cisco catalyst 6500s.we're about to test the resiliance of our network design b...

I have an ASA 5520, running 7.0(6), that I have configured for multiple contexts. Each context has a separate outside network, but I intend for them to each be on the same inside subnet.Interface gi0/2 is connected to the inside subnet, and this int...

HiI have a ASA5510 and have some questions as belowI am thinking to configure 1 ASA5510 in active/passive mode on the same device by creating multiple contexts on it. Is this possible if I have security plus license on it? Can one ASA5510 be configur...

We are considering a strategy of blacklisting or whitelisting IP by country. Some questions:1) Is there an easier method than adding lots of IP ranges (i.e. just specify a country)2) What would be the performance considerations? i.e. how big of a lis...

i want to know the different between discover the devices through physical Interface IP address and discover through lookback ip address.Please tell me which one is better and if there is any documents that show the different please tell me from wher...

Hello all, I'm not really experienced with the PIX firewalls, but I do have a good knowledge of the basic IOS for the routers/switches. Anyway, I have a Pix 525 firewall that has its interfaces, etc. already set up with IPs. My one question is on ho...

Wondering if there's a way to look at past VPN login history without using a syslog server, and if not, what syslog id's should I be looking at. Right now I want to be able to look at either a time frame and see who logged in during that time frame,...

I have a site office connected to my head office the major issue is bot side have same private IP range. I just wanted to confirm what i have to configure to make the listed vpn connectivty run fine

Is there a way to nest multiple access list within ASA? [in other words - can access-list be grouped on interfaces?] if so, how many per interfaces?-if link is available - pls provide.thx

My goal is :- we want port 25 from specific outside addresses ( 208.75.194.0/21) to be allowed to: my1.cbc.com (notes) and mys.cbc.com (notes1) This is my partial configname 10.101.91.14 Notes1name 10.101.91.13 notesname 208.75.194.0 Mx_lo...