Network Security

I have ASA5510 set up. By using NAT, the inside hosts can access internet. If I want to just block certain hosts, for example (ip: 192.168.1.112) to access internet. How do I do it?

Can you configure a network filter to allow a remote client to only access certain hosts in a subnet?We have a support company the we would like to limit access to only two servers in two different subnets, is that possible?

Hi guys.I want to know if anyone can tell me if it is possible to configurate a 2800 router with the feature Zone-Based Policy Firewall and using a NM-CIDS as IDS.The idea is put the 2800 between wireless zones and pass the traffic over the NM-CIDS.T...

Hello:I'm getting the following types of log messages on my asa 5505 7.2.65.32.5.74 PublicIP Deny udp src outside:65.32.5.74/53 dst inside:PublicIP/10521 by access-group "outside_access_in" [0x0, 0x0]Basically another DNS server is trying to get some...

In the RME collection status partially successfull config archive; some hosts are showing errors which read as follows:" CM0012: Unable to create new version $1 Action: check if disk space is available and directory has required permissions "The unit...

I have recently consolidated my infrastructure and moved a few websites from DataCenter1 to DataCenter2. DC1 was running a PIX 515 with 6.3.x IOS. DC2 was running an ASA 5510 with 7.0.4 IOS and has been for 18 months.The websites that were moved from...

We bought 2 IDSMs, and currently are in the stage of evaluating different Management & Monitoring software, like MARS,Enterasys, etc, and would appreciate your hands-on experience and comments. thanks.

One of my failover pair of ASA 5520s need to be replaced. It is the primary unit. Will the following commands suffice:interface GigabitEthernet0/3 description LAN/STATE Failover Interface speed 1000 duplex fullfailoverfailover lan unit primaryfailove...

I found that PCs behind the ASA 5510 are not able to ping any outside ip addresses including the firewall's outside NIC ip. However, users are able to browse any websites as usual. I am new to cisco's firewall. Could someone adviseme on how to troubl...

When configuring isakmp key "keyname" address x.x.x.x netmask y.y.y.y - what are the allowed characters for the shared key? I did a search and found several articles that said it could be alphanumeric. I have some existing connections that are using ...

Hi,We upgraded a pair of 515e's last night from 7.2.2 to 7.2.2.22.The upgrade was fine, however when we tested both L2L and Client based VPN connections we hit issues and were finally forced to roll back to 7.2.2 due to time constraints.Our problem w...

Hi All,Here is my dilemma,I have 2x ASA 5520 v802 running multiple context and failover.I also have the AIP-SSM-20 module installed in each running v516E1.My problem is that I am unable to allocate an ips sensor to a context.I receive no output from ...

I am attempting to migrate from 515's to 5520's. Due to the ASA having fewer eth interfaces than the PIX, I am trying to bring two DMZ's (both on 2950 switches)in to a switch (also a 2950, which I'll call the "bridge") on separate VLAN's, then bring ...

I have some home managed to break my outgoing VPN connections. We connect to a clients site via Cisco VPN and I originaly got it to work by createing a Dynamic NAT statment NATTIng to .120-.124 of our public IP addresses. Somehow I have managed to br...

I am unable to access a windows 2003 server at a remote location. The server does communicate with an interface server on my side just fine. I can ping and trace route to the server with no issues. Everything seems to be ok EXCEPT when I try to RDP t...