Network Security

Does anyone know, does the ASA 5505 only allow a range of 30 addreses or can you use the whole subnet if needed?

Two firewalls, active <> active, one located in one data center at onephysical location, the other is located in another data center at anotherphysical location. This arrangement is for disaster recover purposes and tosave money (1 pair instead of 2 ...

The signature generates false positives on DNS traffic.An example is a DNS query with an Transaction ID: 0xE30FAt networks with a lot of DNS traffic the signature will produces 30+ alarms per day.

Hi, i've a soho97, i've make a access-list and a ip inspect on e1 but when i make a port-scann, i recive that i have same port open and same port close but unsecure. can i solve?attach my configuration.attend your answer.

Hi,I am trying to set up an ASA 5500 to do some routing. We have a couple of networks on the inside, and I am trying to use the router as the gateway address for one of them. It has routes to all the networks and I added the " same-security-traffic p...

We have a Cisco Pix 515e (with Quad card for 4 DMZ's), we are thinking of upgrading as the CPU can get high etc. What is a the new model to go for that does that same job but gives us more CPU and memory?

I upgraded the ips module ASA-SSM-20 on the ASA from 5.x to 6.0.3 lately. The ASA are setup as active/standby. i upgraded both modules successfully on each ASA. After the upgrade, i notice the ASA failover to the other partner about 10 times for the ...

So does a static between zones override an ACL? Or is a static also needed when creating an ACL?

Remote management via ASDM/HTTPS on the Outside interface of the ASS5505 is configured and working over the Internet and is restricted to only a few host IP addresses. Access tried from any other Internet IP address does not work. However, when runni...

Hi all,i have an issue using nat & global; i have the following config on my pix, running 6.3nat (inside) 2 access-list ftp_clientsnat (inside) 5 access-list DomainControllersnat (inside) 5 172.16.254.0 255.255.255.0access-list ftp_clients permit any...

Hi, we will upgrading our Cisco Pix 515e to a Cisco ASA 5520. Our Pix has a quad card that lets us have 4 DMZ's. The 4 interface ports simply go into 4 VLANs on a Cisco 3550 switch. Each of the 4 interface have an IP address assigned to them, this al...

Greetings, I have a PC on my LAN which I sometimes use to establish a VPN tunnel with a remote network via Cisco VPN Client. I use a Cisco router as my gateway router via broadband to gain access to the Internet and employ PAT for address translation...

Hi friends,We are building a branch office connectivity solution and we are planning for NME-NAC-K9 module for the 2811 routers. Primary router will be connected to MPLS and secondary to ISDN. Is it possible to equip just primary router with NME-NAC ...