Network Security

Sorry if this has been asked before but I couldn't find any conclusions on this:Can a ASA firewall running latest firmware ever implement policy routing, say like force web traffic out interface 1 and all other traffic out interface 2, similar to a r...

Hi!If I split my fw in contexts (PIX 525 v7.2) will I lose VPN functionality?Thanks!

I have two ASA5520s, both running 7.2(3) in an Active/Standby cluster. Since moving them to 7.2(3) it appears to me that the Standby unit is leaking 100kb of memory every hour; it was up for 5 days and suddenly started complaining about being out of ...

hello, i have a ASA 5510 with CSC module, and i have CCM 5.1, i configured IP trunk between the call manager and international call provider through internet using SIP protocol, and that is my configuration :SA Version 7.2(1)!hostname Itisaluna-Firew...

I just setup an ASA 5510 with the SSM10 module installed and specified to the inspect all traffic I have tested it by doing some port scans and then showing alerts and it seems to be working fine at this point. I setup the trap notifications to a sys...

Problem - installing a 5505 to replace a Microsoft Routing&Remote access setup with websites. The box has two interfaces an internet (public) and an (internal) 10.90.x.x IP net.Wante to know if there is a way to allow external IPs to be used for the ...

Can anyone tell me if NAC is capable of handling desktops that have multiple NICs configured for failover or even just set up as a team (i.e. a single ip address). Can it handle placing all of the correct switch ports in to the right vlan once the us...

I have static nat on inside to the VPN so that internal clients can access the VPN. The problen is that VPN clients and L2L conections cannot access the dmz. Any thoughts?

We're in the process of migrating from 4.5.6139 to 5.2.0225; thus far, the migration is going extremely well - with one bizarre issue haunting my sleep.I started seeing this behavior about 2 weeks ago, on machines that (so far as I can determine) hav...

Is there a way to set the SSH timeout on the IPS 6.x sensors? I certainly cant find it...thanks

In an enterprise using an in-line IPS deployment with CSM/MARS for mgt/mon of IPS devices, what is the recommendation for a lab to test IPS changes (signatures,filters,code,etc) in production? Looking for an enterprise perspective.

Hi. I've configured a FWSM with a Core6509 and I have this problem: In the Core I configured a Vlan90, The procedure was: Vlan Database --> VLAN90 name DMZ1 --> VLAN90 state active --> exit. Next I done this command: firewall vlan-group 90 90 --> fir...

Just a quick question really...What is the difference between an ACL and a firewall?As far as i can see they both can deny/permit traffic based on source or destination IP/network as well as by protocol and port.Are they essentially the same thing or...

I have two ASA 5520's running 8.0(2) and ASDM 6.0(2). Ever since I upgraded I've had issues with ASDM when using the Real-Time monitor, it pegs my PC processor at 100% and locks up ASDM. I guess it could be my machine, but I never had an issue with t...