Network Security

I am doing ftp application inspection on a traffic  that matches ACL ( permit statement) src dst host.This part works  fine.However, I want to exclude group of hosts from being inspected  by my own policy and I want them to use aglobal one. I am  acc...

Hi,I was wondering if someone could help me determine the limitations of using a failover-only PIX in standalone mode. I was reading this page: http://www.cisco.com/en/US/docs/security/pix/pix61/configuration/guide/failover.html and in the Failover ...

We upgraded all our ASA's last weekend to 8.2.3.  The IPS modules were left on the version of code they were using when the ASA's were on 8.0.4.32.Since the upgrade, I am seeing something on the IPS sensors that doesnt make sense.  When looking at th...

Hello I have a problem with NAT,the original config works fine (two lines below)nat (inside) 1 10.149.0.0 255.0.0.0global (outside) 1 62.206.190.254Additional I want to NAT the inbound traffic for a customer from outside 172.16.X.X to 10.149.241.20-1...

Hello, We have a NAC OOB-L2-VG Deployment at the Central Site with VLAN Mapping and ADSSO which works just fine.As part of the project we have implemented NAC Modules on ISR routers for the branch offices; same topology but as the documentation state...

Hello Everyone,Can anyone give me IOS software Version 12.4 (23) or 12.4 (20)T ???Please its very important ...

folksi'm trying to install asdm on a vista machine (SP1) but i keep getting an errorthe installer tells me there is no java run time environment installed but i have tried installing jre-6u7-windows-i586-p & jre-1_5_0_22-windows-i586-p but i still ge...

With the below given configuration on my pix firewall, NAT is working properly and three local ip get mapped to x.x.x.43-45 public ips but PAT is not working.ip address ouside x.x.x.42ip address inside 192.168.12.1global(outside) 1 x.x.x.43-x.x.x.45g...

What should be the outcome of a "clear route" command on a fwsm that has EIGRP configured? Is this command equal to the "clear ip route" in IOS?We have two fwsm (separate chassis) configured in an active/standyby configuration.  We somehow failed ove...

Hi Folks,I want to configure a new asa 5510 with a SSM module to carry out IPS/IDS across a trunk.  At present, ssl traffic comes in from the internet  through an external firewall, down through a web switch to a CSS where the ssl terminates.    The ...

I wanted to find out if It is possible to  created a network groups for dmz hosts to access inside host with no service group. I just want to allow some perticular servers to communicate to inside.

Hi,I have a pair of ASA 5550 running in active\standby with software ver 8.3. I want to convert my ASAs from single to multiple context mode, but I was wondering how active\standby is configured in this mode. The system context does not allow any IP ...