Network Security

I configure my ASA 5520 using the command line, but I keep an https:// session open so I can use the packet tracer in order to perform virtual tests. Great.So I check to see if my configuration will pass a simple http request from inside to outside (...

Is it possible to configure this firewall with two ISPs so that the same internal webserver can be accessed via both ISP external addresses?

I have a Cisco 3005 Concentrator with a public and private IP addres. Private IP address is 172.22.0.3 . Backbone switch Cisco 4506 is 172.22.0.5 255.255.0.0 Client connect to VPN via IPSEC using Radius-Auth with expry to IAS server inside the networ...

hello,suppose there is one host who is accessing two different servers in the network.when host A access to host B all we have to do is make sure that it gets to talk to it one to one thus i configure thisstatic (inside,outside) tcp 60.x.x.72 3392 20...

Can you have multiple subnets on the outside of a Pix 515E with 6.3(3)? I have run out of addresses and adding a subnet would take much less configuration changes. I have a 2801 router with a T1 card with the Pix 515E behind it. If I just set up the ...

Hi,Can anybody confirm whether it is possible to assign Users to specific Vlans based on Active Directory attributes.Cisco NAC 3100 Series devices will be deployed in the installation. At present no posture assessment is necessary, only Vlan assigmen...

i have downgrade the ios version on pix 525 from 7.2(1) to ios version 6.3(2),but now i have found problem with the failover unit that is when i configure the failover for redundency it shows the message that there is no license for failover,plz guid...

Has anyone had problems getting the S283 Signature on the 5.1-5 version to load correctly with the upgraded 3.1 CSM? I got the S282 signature to upload but no luck on the S283

I just recently changed the IP pool for my VPN clients from class B to a class C.I assinged 192.168.1.1-253 for the range.I have a VPN client who is wireless and his netgear assigns him 192.168.1.2. He can validate on the VPN but cannot resolve names...

I'm getting some alarms for signatures that I think are a bit too sensitive -- 3051, for example. It makes sense to me to adjust the Minhits or AlarmInterval to make the signature less sensitive, increasing the level of activity before an alarm occcu...

Ok, I am trying to have an FTP server (eFTP if it matters) in my web dmz. Basically have the server with a private performing NAT to a public address, no big deal, I have enabled the appropriate port for forwarding (21) - and I can set what other por...

Hi all, Could you please tell me if I can log url pages visited in inbound and outbound connection through Cisco Asa?I tried with logging trap debugging but i see only layer3/4 information.Thanks!Marco

Hi,My firewall is PIX 525 with IOS version 7.2. Is it possible to use trendmicro IWSS as URLfilter instead of N2H2 or Web sense.Thanks,siva

Well, this is my first Pix experience, and after reading through the doc, I am still with some questions.In the network diagram I send you, have the pix outside interface (to DMZ) to be announced in a public DNS for me to have access to the internet,...

I'm trying to figure out how to select signatures. I suppose one could just watch the alert chatter and disable or delete signatures that seem too noisy. Doesn't seem very secure. I'd prefer to analyse the traffic that's triggering them, but if I onl...