Network Security

hellowe have 2 5550 ASAs in active-standby mode - please see attached diagram. the ASAs LAN Failover, Stateful Failover and Inside interfaces all physically connect into Cisco catalyst 6500s.we're about to test the resiliance of our network design b...

I have an ASA 5520, running 7.0(6), that I have configured for multiple contexts. Each context has a separate outside network, but I intend for them to each be on the same inside subnet.Interface gi0/2 is connected to the inside subnet, and this int...

HiI have a ASA5510 and have some questions as belowI am thinking to configure 1 ASA5510 in active/passive mode on the same device by creating multiple contexts on it. Is this possible if I have security plus license on it? Can one ASA5510 be configur...

We are considering a strategy of blacklisting or whitelisting IP by country. Some questions:1) Is there an easier method than adding lots of IP ranges (i.e. just specify a country)2) What would be the performance considerations? i.e. how big of a lis...

i want to know the different between discover the devices through physical Interface IP address and discover through lookback ip address.Please tell me which one is better and if there is any documents that show the different please tell me from wher...

Hello all, I'm not really experienced with the PIX firewalls, but I do have a good knowledge of the basic IOS for the routers/switches. Anyway, I have a Pix 525 firewall that has its interfaces, etc. already set up with IPs. My one question is on ho...

Wondering if there's a way to look at past VPN login history without using a syslog server, and if not, what syslog id's should I be looking at. Right now I want to be able to look at either a time frame and see who logged in during that time frame,...

I have a site office connected to my head office the major issue is bot side have same private IP range. I just wanted to confirm what i have to configure to make the listed vpn connectivty run fine

Is there a way to nest multiple access list within ASA? [in other words - can access-list be grouped on interfaces?] if so, how many per interfaces?-if link is available - pls provide.thx

My goal is :- we want port 25 from specific outside addresses ( 208.75.194.0/21) to be allowed to: my1.cbc.com (notes) and mys.cbc.com (notes1) This is my partial configname 10.101.91.14 Notes1name 10.101.91.13 notesname 208.75.194.0 Mx_lo...

Ok, we now have a DSL line (netopia router) and we had a previously good working RAS setup to our Microsoft RAS server and with the ISP change I just went in and changed the ip addy to the new ones and the RAS vpn no longer works. I am a newb so I am...

I have a PIX 515E 6.3(5). Our network is obviously being attacked by viruses and the xlate count is skyrocketing to > 50,000 which basically shuts down our internet. Is there anything I can do on the PIX to block traffic to prevent this from happenin...

First off, I see the ASA comes with a set of default threat-detection rules...Are these acceptable numbers for most? Or, is it best to modify them?I'm doing some testing with a single external host running all kinds of port scans and sweeps filling ...