Network Security

what advantage is their from a security point of view of configuring NAT.

I have 3 inside networks that I would like to route between and also allow for outside access to the internet. 192.168.98.0/24,192.168.99.0/24,192.168.97.0/24 All 3 are defined on a 3560 that has a default route which points to my ASA 5510 inside i...

I have two servers one located in pix inside and one in dmz. I wanted to configure them so that they can communicate with routers and switcheslocated outside of pix firewall. My inside server is working fine, able to go Internet and able to comminica...

Hello,can anyone share how you deal in IDS/IPS with applications that are based on Akamai content delivery services?There is a concern that if “Akamized” web-server is targeted in web-based attack - it will be recognized as initiated from one of ...

Hi,I'm configuring DHCP server on one of my VLANs on ASA but it accept me just 128 addresses can anyone describe please why? why doesn't it accept more than 128 address?Thanks in advance

I get the same results pinging in eiter direction through the VPN tunnel (tunnel is working fine) below is a trace and included is the config.HO1ASA02# packet-trace input inside icmp 10.1.6.121 3 1 10.60.50.1 Phase: 1Type: FLOW-LOOKUPSubtype:Result: ...

Hello All,I just installed my ASA 5505 and the firewall log showed that it denied a connection from Ip address 74.9.151.50 every second. Please see the attached file. What does the log message indicate and how to stopip address 74.9.151.50 from att...

Hi,I'm not sure if this would be more suited in the R&S forums but I figure some security people must have worked on something similar....I have an ASA sitting behind a 2800 router with 2 Internet circuits. I'm trying to NAT everthing from the ASA in...

Hi,We have this module ASA-SSM-20 installed on our ASA 5520 appliance. I am able to login in ASA device but when i am doing session 1. It is asking login : after giving username and password it is not accepting the username. This module is installed...

Hi there, I apologize if this is a repeat. But, the network I have is situated this way: No DMZ (yet), No NAT'ng, 1 Class C subnet, class C IPs assigned to devices, ASA 5505 in transparent mode, and a Cisco VPN Concentrator 3005. (This is going to ...

Hi all,We create new VLANs & will assign these VLANs to the Firewall Services ModuleBy using the below command:-(Config)# Firewall vlan-group firewall_group vlan_rangeMy question is there any need to restart the FWSM after adding new vlan into vlan g...

Hi!I'm abit confused and need some config helpHow would you configure your PIX/ASA to let your DMZ which has a public IP-Network access to the internet without NAT'ing it through the outside interfaceAnd without giving the DMZ access anything else (l...

In a heterogeneous, non-Cisco environment (e.g. Dell switches, Sidewinder firewall), is it possible to obtain accurate topology/visualization information? If so, how is this accomplished? Any other best-practices/gotchas for getting the most out of...