Network Security

On an Active/Active firewall configuration with Standby addresses configured what will happen if the Active interface goes down? In our setup the firewall did not fail over. But it did fail over for the interfaces which did not have an IP address con...

Hi,I have a web server in LAN (no DMZ used) but the access is very long. This message appears : Deny IP spoof from (217.128.x.84) to 217.128.x.84 on interface outside217.128.x.84 is my ISP IP.When I activate IP Spoof on Outside interface, I have the ...

Hello,I would like to create on a CE router a different QoS depending on 2 traffic types: web and the rest. The idea is to give to a less important application (the web) only 30% of the bandwidth.My problem is that, with the following configuration, ...

I have recently enabled the 4th interface on the ASA 5510. I assigned a 10.16.0.5/16 address but cannot get any machine inside it to communicate with any machines on the inside or dmz subnets. The objective is for inside clients to access service por...

Hi TeamI have a firewall with a Fail-over only license and would want to use it as a standard firewall what should I do.How can i achieve this ?? If achievable at all.Thanks and Regards

Hai, I am using ASA 5510. Sometimes the system automatically stopped all operations. What may be the possible cause?. Is there any chance for the machine automatically rebooted?. How Can I know that the system is automatically reboting?

Is there a known limitation on the number of shun's in a PIX 535 firewall before performance (or other) impacts occur?

Hi,i am considering an upgrade to 8.0(3), 1-is 8.0.3 stable ? 2-advantages disadvantages ? 3- what about 7.2(4) ?Thanks

I need to open ports 6464, 7575 and 443 in my Cisco ASA 5505 so that techs in our office can access a hospitals Stentor Isight...Please help with abc steps.

Hi,I had inserted the 4 Fast ethernet interface into my 4215 IDS but i can see when it is booting & it is not detecting once the IDS up & running.Please suggest.ThanksNavin

i have a query about the static NAT command.if the command static (outside,inside) is entered i believe this is a reverse of the static (inside, outside); in other words the source is changed to whatever is specified in the command.on this basis the ...

hi there i have an ASA5510 with the following setup: e0 - outside interface-212.188.x.x/28 e1 - inside if - 192.168.3.x/24 into 2960sw pport 10 vlan 1-switchport access e2 - dmz if - 172.16.x.x/24 into port 14 vlan 40 switchport access. linux server ...

Some guy is coming to our site and demanding a payoff or he will DDoS us. We didn't pay him and he did what he said he was going to do. I expect another attack at any time.The flood was only 10Mb, but our cisco was not tuned as good as it could be....