Network Security

I have PIX 515E with 2 interface, inside, outside, I have PAT from inside - outside and NAT from outside to inside.I have installed CISCO ASDM, when I am monitoring the status syslog and droped packet rates I found that, ACL drop packet rate is very...

Does anyone know, does the ASA 5505 only allow a range of 30 addreses or can you use the whole subnet if needed?

Two firewalls, active <> active, one located in one data center at onephysical location, the other is located in another data center at anotherphysical location. This arrangement is for disaster recover purposes and tosave money (1 pair instead of 2 ...

The signature generates false positives on DNS traffic.An example is a DNS query with an Transaction ID: 0xE30FAt networks with a lot of DNS traffic the signature will produces 30+ alarms per day.

Hi, i've a soho97, i've make a access-list and a ip inspect on e1 but when i make a port-scann, i recive that i have same port open and same port close but unsecure. can i solve?attach my configuration.attend your answer.

Hi,I am trying to set up an ASA 5500 to do some routing. We have a couple of networks on the inside, and I am trying to use the router as the gateway address for one of them. It has routes to all the networks and I added the " same-security-traffic...

We have a Cisco Pix 515e (with Quad card for 4 DMZ's), we are thinking of upgrading as the CPU can get high etc. What is a the new model to go for that does that same job but gives us more CPU and memory?

I upgraded the ips module ASA-SSM-20 on the ASA from 5.x to 6.0.3 lately. The ASA are setup as active/standby. i upgraded both modules successfully on each ASA. After the upgrade, i notice the ASA failover to the other partner about 10 times for the ...

So does a static between zones override an ACL? Or is a static also needed when creating an ACL?

Remote management via ASDM/HTTPS on the Outside interface of the ASS5505 is configured and working over the Internet and is restricted to only a few host IP addresses. Access tried from any other Internet IP address does not work. However, when runni...

Hi all,i have an issue using nat & global; i have the following config on my pix, running 6.3nat (inside) 2 access-list ftp_clientsnat (inside) 5 access-list DomainControllersnat (inside) 5 172.16.254.0 255.255.255.0access-list ftp_clients permit any...

Hi, we will upgrading our Cisco Pix 515e to a Cisco ASA 5520. Our Pix has a quad card that lets us have 4 DMZ's. The 4 interface ports simply go into 4 VLANs on a Cisco 3550 switch. Each of the 4 interface have an IP address assigned to them, this...

Greetings, I have a PC on my LAN which I sometimes use to establish a VPN tunnel with a remote network via Cisco VPN Client. I use a Cisco router as my gateway router via broadband to gain access to the Internet and employ PAT for address translat...