Network Security

Hi, In asa by natting we can map one single IP to Local IP. Is it possible that we cud map one public IP into two local IP of Servers and set the priority if Ist server gets down (Ist Loacl IP) then by default the query from outside to be forward int...

I want to resequence an access-list on my pix, what is the command for this, it is not the same as resequenceing on a router.Thank you

Hi, I have set up my firewall but some confusion in my mind going on. I have configured DMZ and Inside zone and both range are different and inside security level is by default 100 and DMZ is 50 but as per the default rule the higher security level z...

Hi, In my organisation there are 5 Vlans and all are configured on switch and this is a L3 switch and each one is connected L2 switch and I have make multipal V-lan on L2 switch as well and I have make all route entries on L3 Switch. In this scneario...

As I review abt ASA that ASA doesn't support Load balancing on ISP links and load balancing on VPN tunnel as well. If one gets down then the other one active it means the IInd link will be unusable if Ist link is active. Is there any way so that load...

Hi, In my company I need to make an tunnel and I will make it and 100 MB data has to be move on other site via tunnel but I am not able to reconize how much minimum speed we require so that the data easily to move. Can anyone tell me how we do the ca...

Hi, Can anyone send me documentation of backup of ASA.

Can anyone send me standard configuration of ASA firewall documentation in which all things to be cover so that I configure firewall perfectly and secure network from outside.

I have a customer with two PIX firewalls. Both currently run 6.35. One is a 501 which cannot be upgraded to 7.x. They would like to upgrade the other firewall, a 515, to 7.x. I am interesting it hearing from anyone that may have a L2L tunnel up betwe...

Can be configured a failover between a PIX 515 and an ASA5510 with the same version of OS (8.0)?

nameif ethernet1 inside sec100ip address 10.0.0.1nameif ethernet2 dmz sec10ip address 192.168.20.1route inside 10.10.10.0 255.255.255.0 10.0.0.2access-list dmz permit ip any 10.10.10.0 255.255.255.0 access-group dmz in interface dmzWhat static nat co...

FYI...It appears cisco.com is using an updated SSL cert. You have to go into your auto update settings and click "update now" to accept the new cert.

the concurrent connections at FWSM suddenly increased after that the network become down if i make clear xlate , the problem disapear i decrease the timeout xlate from 14 hours to 3 hours but the problem still existing FWSM is running in multi contex...