Network Security

Is there a way to nest multiple access list within ASA? [in other words - can access-list be grouped on interfaces?] if so, how many per interfaces?-if link is available - pls provide.thx

My goal is :- we want port 25 from specific outside addresses ( 208.75.194.0/21) to be allowed to: my1.cbc.com (notes) and mys.cbc.com (notes1) This is my partial configname 10.101.91.14 Notes1name 10.101.91.13 notesname 208.75.194.0 Mx_logicobject-g...

Ok, we now have a DSL line (netopia router) and we had a previously good working RAS setup to our Microsoft RAS server and with the ISP change I just went in and changed the ip addy to the new ones and the RAS vpn no longer works. I am a newb so I am...

I have a PIX 515E 6.3(5). Our network is obviously being attacked by viruses and the xlate count is skyrocketing to > 50,000 which basically shuts down our internet. Is there anything I can do on the PIX to block traffic to prevent this from happenin...

First off, I see the ASA comes with a set of default threat-detection rules...Are these acceptable numbers for most? Or, is it best to modify them?I'm doing some testing with a single external host running all kinds of port scans and sweeps filling t...

Is there a way to rate-limit the bandwidth usage of IPSEC VPN CLients on a per user or per-tunnelgroup basis? Clients authenticate with NTAUTH.I've noticed this can be done with SSL VPN, but how about IPSEC VPN clients?Thanks

In Lab and trial license, I have successufully installed CSA Agent using the Agent Kit built in MC.However, as per the notes and reading on CSA manual, the CSA doesn't register itself to the CSA MC. Is there a manual way of registering Hosts into the...

I have read in the book ”Advanced Host Intrusion Prevention with CSA” some applications , CSA can , at times look like a debugger trying to interfere with the licenseing code, and some crash.You can work around this situation by implenting a simp...

Hi, I have ASA 5505 FW and its configured fine and all internal machines can access DMZ machines and DMZ machines can access the inside machines (Made access rule for this). Now My all Application Server is in DMZ Zone and DB server which is in Inter...

HiI have configured split tunnel pix version 6.3when I am upgrade version 6.3 to 7.0.2 then all is work except spilt tunnel.in previous configure has extended acl.7.0.2 not work extended acl ?can any one suggation what is problem.ThnaksBiplob

Obviosuly this clears the translation slots but in TCP terms - how does this process happen does this send a reset ? what flags are used ? FIN/FIN ? TIA;)[email protected]

I have made an ASA5505 to run an SSL WebVPN with self installing AnyConnect VPN Client. When I connect a client to the VPN I can see in the log that the asa box Teardown ane connection the client tries to make.Fx. "Teardown ÚDP connection 7497 for O...

Hi, does anyone have some experiance with the ASA and command authorization using a TACACS+ server?I'm using Cisco ACS 3.3 and ASA5505 with software verson 8.03.Login authentication for telnet or ssh using tacacs+ works without problems but enable mo...