Network Security

Hi,Ive been having issues when creating subinterfaces with vlan id's on the 5550.The port connecting to the ASA5550 is a trunked port and has the same vlan id as the sub-int on the 5550 and is allowed to trunk the vlan. When this is configured you ar...

what is the difference between L2 & L3 NAC?

Hi everbody,I need your help! I have Server 2003 Domain Controller running Exchange and OWA. Sending and Receiving Email no problem. when I want to access OWA from outside that doesnt work. If I change the settings OWA works but clients(inside) canno...

I was able to get a web server that we have on our DMZ to communicate with my SQL server but I wanted to know if anyone knew why I needed to use gt 1024 in my access statement.I orginialy tried to useaccess-list DMZ extended permit tcp host 192.168.1...

Is it possible when creating an exception with the Rule Wizard to not have it create a new rule module every time a rule is created. I would like to just add rules to an Exceptions policy that is applied to the group with out it creating a new rule m...

I am trying to block AOL internet radio. with a sniffer tool, it shows that the outside ip's are still being accessed. Also, when i do a show access-list it does not show anything on the hitcounts.access listaccess-list dmz-2_in; 7 elementsaccess-lis...

I have figured it out, thanks.

HiI have tried to set up access from a Web Server in a Web DMZ to a SQL Server sitting in a SQL DMZ. Initially I thought that all I need to do was setup a static from teh web server say static (inside, outside) 1.1.1.1 1.1.1.1 0 0 and the set an ACE ...

Hi,Has anyone tried configuring ASA 5505 for two ISPs for redundancy? Any issues that came up? Did the fail-over work?Thank you.Regards,Alex

I tried creating a privilege 0 account for a client for read-only access to their ASA firewalls. For the CLI login, it won't matter cause they don't know the enable password, so that keeps them from making changes. But for the ASDM login, I was able ...

Hi,Based on the attached diagram, i want to allow network monitoring server to monitor the remote branches routers, can i configure the ASA to allow traffic from monitoring server to branches routers without perform NAT ? if not, are there any way fo...

Greetings everyone! I apologize if this question is asked in lay terms, I'm just beginning my CCNA and my company would like me to set up a secure network utilizing a cisco 3845 router.Simply put, we need some form of firewall. Is this already an inc...

We have VPN between two sites. All traffic (priv. sub - priv.sub) is not natted. However, I want to be able to source nat all traffic destined for a specific server and port? Can this be done?