Network Security

I have configure ips in inline mode in inside network. I want to bypass all traffic for dmz from inside in ips.

hi,i have several site to site tunnels to many locations.can i apply the command "sysopt connection permit-vpn" to one tunnel and leave it disabled for another tunnel ?thank you

Dear All,I am setting up a test environment with the following configuration. Although I have created the ACL and also enable the Port re-direction, but I still not able to access the FTP server from the outside.ASA Version 7.0(6)!hostname ACN-GWdoma...

I installed cisco works prepared for monitoring IDS Sensor, but i have some problem Access Apache windows folders Error: The requested URL cannot be reached because client denied by server configuration: c:/program files/cscopx/htdocs/csconm Descri...

We have a 5510 and a 5505 at two remote offices that have bonded T1s going through 2821 ISRs. We are seeing an under-utilization of the bandwidth and I am trying to figure out if there is some over head in the technologies using the tunnel that migh...

I have attached my config and took out the ip and password info. I am trying to setup a webserver and remote desktop connection on 3390 but the logs keep stating that incoming connections are being blocked the the inbound ACL. Can someone tell me w...

The scenario I have is an ASA in context mode and I am looking to terminate VPN clients on a seperate ASA that has an interface on the same private subnet. I have added a route to the ASA context for the VPN pool that belongs to the VPN-ASA. i can p...

i am having fwsm and want to configure a context for a customer in which i want to block 8081 port. can anyone let me know how to configure context in fwsm module (6509)regardsshivlu

Are there any commands for shaping traffic on the ASA? I have found the police command but none on shaping.

Hi Everybody,I have a problem. I made a VPN site-2-site with 2 ASA 5505. The VPN works great. And I create a redondant link if the VPN failed.In fact, I use Dual ISP with route tracking. If the VPN fails, the default route change to an ISDN router, s...

I've set up a number of site-to-site IPSEC tunnels, but the one thing that I can't seem to get is: Is there any way to bring the tunnel up if I am not actually at one of the endpoints?...usually I can just tell one of the people at either end to do a...

Hi, need helpIn my firewall i have no rule play in inside interface for outbound traffic but i have a rule play for inbound traffic in outside interface saying that from my particular branch network can access my server through SMTP.Just i wanted to ...

I have an older, decomissioned pair or 515e PIX firewalls configured in failover mode (active/passive). I now have a need to use them both in separate standalone modes, however when I try to use the PIX configured to act as the Failover secondary, it...