Network Security

I need to put a firewall device between a server load balancing (SLB) device and the real server(s). SLB uses Direct Server Return (DSR), in which case the VIP address is configured as the loopback address on the real server. Simply, the reason for t...

Anyone have suggestions on how i would engineer an architecture where i will have 2 failover pais? They will be PIX 515E's. The top firewalls will be hosting our DMZs and the outside internet of course,. and the bottom pair will be servicing our trus...

Hi,We are testing NAC L2-IP on a Cat 6506 running 12.2(18)SXF9.When configuring for NAC L2-IP, the switch is able to download the required ACL entries. The HTTP Server is enabled in the Switch, however still the HTTP redirection is Not working.From t...

Not sure this can be done - I have one ASA 5510 with 4 interfaces. I want to be able to firewall all internal vlans that would connect through a single inside ASA interface (Inside) but pick-off one of the vlan's traffic so it exited a second ASA ext...

Hi, I am trying to setup a Cisco ASA firewall. I have attached a diagram of what it needs to do.I have managed to get the ASA to do the nat /pat (many inside to one outside address) traversals to work, but I am running into a problem with getting the...

I am new to the PIX and want to make sure that the logging is as high as it can be.If it isnt how can I raise the level of logging to the highest level.###########CONFIG-PORTION-START##########[sho config]logging on logging monitor debugging logging ...

We are facing a Problem with a special configuration:nameif ethernet0 outside security0nameif ethernet1 inside security100access-list www_outside_inside permit tcp any host 192.168.117.223 eq wwwaccess-list www_outside_inside permit tcp any host 192....

Hi I have a successfully setup a VPN connection through Cisco PIX 506 (E) 6.3(5)But certain HTTP traffic to port 8080 doesnt seems to pass.How do i check where its getting blockedHow can i check which traffic is going through the VPN tunnelcheersRamp

hi,we had 1 5520 & have purchased 1 new asa 5520. we want to make cable based active/active failover on this 2 devices. can someone help me with sample config? i found some docs but that were for pix. i need on asa.

I'm thinking about firewalling off 2 WAN links from 2 ISPs with just one ASA. I'm going to setup second and third interfaces facing the WAN and treat them as if they were individual and just add routing to forward traffic as needed. I know of a setup...

Location Network/Subnet Router/GatewaySite A 1.150.1.0/8 1.150.1.1Site B 192.168.1.0/24 192.168.1.1Site C 192.168.2.0/24 192.168.2.1Site D 192.168.3.0/24 192.168.3.1Site E 192.168.4.0/24 192.168.4.1We have an MPLS that connects all of these locations...

Here is the layout. Two layer 2 switches connected on vlan 2. Each switch has one of a failover pair of pix running 6.3(4) attached on vlan 2. This is the outside interface of the pix. There are also an inside and a dmz on each pix but each pix is at...

Are the ASA inspect statements (http,ftp, sunrpc, etc) a duplication of functionality available in the AIP-SSM IPS module? Asked another way, can/should any of the inspect statements be turned off when the AIP-SSM is present?