Network Security

Hi all,We create new VLANs & will assign these VLANs to the Firewall Services ModuleBy using the below command:-(Config)# Firewall vlan-group firewall_group vlan_rangeMy question is there any need to restart the FWSM after adding new vlan into vlan g...

Hi!I'm abit confused and need some config helpHow would you configure your PIX/ASA to let your DMZ which has a public IP-Network access to the internet without NAT'ing it through the outside interfaceAnd without giving the DMZ access anything else (l...

In a heterogeneous, non-Cisco environment (e.g. Dell switches, Sidewinder firewall), is it possible to obtain accurate topology/visualization information? If so, how is this accomplished? Any other best-practices/gotchas for getting the most out of...

Has anyone found a viable way of converting the very odd rule definitions of an ipfw on bsd to a usable format like acl's ? I am really breaking my brain with stuff like "skip" rules ? why would you wan't that and how can i convert that to a usable a...

Does the PIX 515 running v6.3(3) OS correctly support leap year (Feb 29)?

Hi,We monitor internal users http traffic using a product called Surfcontrol Web Filter - SCWF. This SCWF server sits on a VLAN (Cisco 3750) which also has the inside interface of the ASA and we mirror the traffic seen on the inside port to the SCWF...

Good everyone, I am new to this forum and technology cisco, I have the following environment:I have an ASA 5510 7.2 (3) that has a connection to the internet through the outside, the other 3 interfaces are connected to a switch 3560g of 48 ports, is ...

Hi,I am trying the dhcprelay configuration on PIX where the scenario is..There are four logical interafaces configured on the inside interface of the PIX.Each subinterface is in different network where the DHCP server is connected to inside interface...

I have a pair of ASA firewalls running in active/standby config. What is the Cisco recommended way to do a gracefully fail over to the standby unit (for example, when doing software upgrades, etc). Rebooting the primary is my current method, just ch...

I know that the ASA 5520 comes equipped with 4GE ports. However, does it support a slot for an additional SSM expansion card, totaling the GE ports too 8?Thanks,Derek

Hi,We want to purchase ASA5550, this FW come with 8 Gig interface + 1 FE + 4 gig SFP. My questions are:1) Can we use all these interface "or if we use the copper the fiber are disabled"?2)We want to use: One copper interface "As an Outside Interface"...

Have 4 ipsec tunnels they connect on end to end but no traffic passes. I can only ping from ASA 5505 to one of the VPNs the others do not answer, any one had similar problem that they resolved?