We are using ASA 5520.We have blocked port 80 and 443 from Inside to any destination .Below that we have another rule which alow any to any for IP. how to block bittorrent download from inside network. I can't block P2P ports since SYKPE is also using P2P.
View 3 RepliesMy brother keeps downloading torrents and I don't want him to so I was wondering if there was a way to keep torrents from going from my router to his computer but still give him access to the internet. I have a Linksys WRT160N V3 router.
View 7 Replies View RelatedI have a Cisco E3000.My roommate is using our internet connection (in fact mine) to donwload on BitTorrent networks. I could block BitTorrents urls, but she could dowload the torrent file from another connection and do the download with my connection. So I forgot that way.I could also block ports... but she could change the ports of the BitTorrent network...
View 7 Replies View RelatedAdmins could you move this over to Linksys Support, just noticed it's in the wrong place
View 5 Replies View Relatedi have a running ASA5520 with limited protocols allowed but my objective now is blocking all facebook games and still allowing facebook website.
View 11 Replies View RelatedWhat is the configuration for allow port from Outside to inside( 80,21,https...) and i want to allow traffic from outside to inside only 80,https and 21.
View 1 Replies View RelatedI currently have a Cisco 5520 ASA which is up and running and the users are able to connect to Anyconnect to VPN into the network. However, users plugged into the internal network inside the ASA are unable to connect to the vpn address and download the Anyconnect Client. I think this may be to do with reverse NAT missing?
View 4 Replies View RelatedI have 2 questions.Om my cisco 2811 (IOS 12.4(15) T9 IPBASE W/O Crypto) i am using 3 interfaces.And i have a pool of Global addresses: 200.x.z.97-200.x.z.126 255.255.255.0
FastEthernet 0/1 description WAN interfaceip nat outsideip address 200.x.y.253 255.255.255.0
GigabitInterface 0/2/0description DMZ interfaceip nat insideip address 10.0.0.1 255.255.255.0
GigabitInterface 0/3/0description LAN interfaceip nat insideip address 192.168.0.251 255.255.255.0
[Code]....
I have an (old) 1811 router acting as the Internet gateway. My users like to use download managers such as Orbit JDownloader to download large files that should not download. Is there a way to block it? The download managers often start multiple connections and seem to open/cose connections.
View 1 Replies View RelatedI'm using for a company network a 2801 Cisco Router. This router has 2 FastEthernet Interfaces connected on 2 ISP's and one VLAN for internal users. What acl should i use if for example one client from the lan is using a torrent client to download from the internet. I want just to specify a maximum download speed or to block that client to access the internet when it's trying to download something that can affect other clients from the LAN.
View 2 Replies View RelatedI've been searching in google on how to block IDM in my router D-Link DIR-655, i need to block this application because we have a large network here in our office, and i found out mostly of our users when i check have a IDM installed in thier pc and its affecting our internet connection.
View 13 Replies View RelatedI have a cisco 1750 router running IOS 12.1.3.xt2. How can I stop bittorrent traffic?
I use E0 connected to a cable modem.
i share internet with my neighbor (we split the bill) and every so often like in the last 2 days, and usually not again for another 3 weeks for 2-3 more more days each time, am not able to browse(ff, chrome, ie) or use windows live messenger, but yet if i turn on bittorrent, the downloads are fine, the trackers don't update, but DHT and peer exchange update fine.And also, i can get on Gameranger (which uses UDP port 16000) and play games, and this happens to all 5 computers on the network, (4 wireless at my house[3 XPs 1 Win7] and one wired at her house[Win 7]), so it's not something on the computer, also, usually when i check my router the subnet is usually 255.255.255.0 but this morning before i came to work i noticed it was 255.0.0.0 , not sure if that matters, this has been happening for months, usually between every 3-4 weeks, we have no browser and msn use for 2-3 days?
View 1 Replies View RelatedI have a Linksys WRT54GL Router. I'm open to getting another router if it won't suit my needs.Which firmware should I install?Which version/build of the firmware?Any additional modifications I should make to the firmware?
Requirements:Connect an external hard drive to the router, so that any devices connected to the router can access files from the hard drive.Run an FTP server (with SSH) on the router, so files on the external hard-drive can be accessed from anywhere.Run VPN, so that certain computers can access the hard drives over VPN.Run a BitTorrent client on the router with the files stored on the external hard drive.
Our firewall expert has gone off on long term illness leave and I am trying to pick up the pieces :-(
We have an ASA 5520 (local office) talking to another ASA (remote office) via a VPN Tunnel.
My 1st problem is that I cannot ping from my inside network (local) to the outside interface of my remote ASA.
My 2nd is that I have debug enabled on my rules but am not logging anything.
I recently downloaded Deluge and while I can download torrents without a problem, I always have the "NO INCOMING CONNECTIONS' warning. I've tried single port forwarding, port range forwarding, turning UPnP off and on ... in short I've tried a lot of stuff and the only thing that clears the message is to remove the router out of the equation. The message disappears as soon as I connect the pc directly to the modem.
View 3 Replies View RelatedRegion : Hongkong
Model : TL-WDR4900
Hardware Version : V1
Firmware Version : 3.14.3 Build 130320 Rel.39025n
ISP : PCCW Netvigator
I have upgraded to the latest firmware which solved lots of problems regarding unstable wifi connection as well as BitTorrent / P2P transfers.But I also observed that when my BT is on (Transmission for Mac) at around 50KB/s upload and download, my network latency hikes up from some 30ms to 500ms which affects a lot on web browsing or other apps requiring Internet.My BitTorrent app is showing I am merely making some 20 peers connection so I am not convinced that is an ISP problem but it's more about the router.
In HQ , we have cisco ASA 5520 . there is a data line which supplied by ISP for MPLS-VPN service with branch office. branch offices also have a data line which r supplied by ISP. And now, I want the branch office to access resource from HQ without site to site vpn configuration( because we don't have ASA or any device to configure L2L VPN) . so, I need to configure the hq firewall to allow the branch office accessing the resource at hq without any restriction.
View 3 Replies View RelatedWe have an ASA5520 version 8.3(1) We have an existing VPN tunnel between us and our partner site. We need to add a new vlan to our existing VPN tunnel.
Where do we need to add the new vlan to in ASDM interface? Looking through using ASDM, I found 3 places.
Site-to-Site VPN:
1) Connection profiles
2) Advanced > crypto maps
3) ACL Manager
Equipment used:
VBrick Systems Inc., Model HPS 7102 HS-HD
Cisco ASA5520 Firewall
I have been trying to take a vBrick RTSP stream and stream it outside of our network:Inside our network, If I were to open VLC, and go to “Media”, “Open Network Stream” and paste rtsp://123.123.157.10/vbStream1S1 the stream works, audio and video. Outside our network nothing. I have opened ALL UDP and TCP ports to the vBrick 123.1123.157.10 on our firewall and tried from outside of our network:
access-list access-in extended permit tcp any host 123.123.157.10 range 1 65535
access-list access-in extended permit udp any host 123.123.157.10 range 1 65535
After adding this to the access list, the web gui http://123.123.157.10 (uses port 80) and ftp ftp://123.123.157.10 (uses port 21) is functional outside of our network...just not the rtsp stream which works fine internally.
in our VPN configuration (ASA5520, Anyconnect VPN Client), we have different VPN User Groups. These Group Policies are retrieved from an LDAP Server.We'd like to restrict the acess like this:
A Group "Home User" might establish a VPN from anywhere on the Internet
A Group "restricted 3rd party" should only be allowed to establish a VPN from their specific public Source IP Address on the Internet (the public IP Address of this 3rd party Company). When these Users try to connect from any other IP Address on the Internet(Home, hotel, etc), VPN Access should not work!
On our old solution, we were able to limit the remote access network, per user group, to some source IP's.
The IP Filters related to group policies in here seem only to be filters concerning the VPN Address (after the VPN is established: where can this user group connect to). But I did not find filters/access lists, where yoiu can define/restrict public access networks for some groups.Or is it possible to do that by Dynamic Access Policies? How?
I have created an IPSEC VPN tunnel using a Cisco ASA5520 (corporate) to a Cisco SRP541W (remote). The corporate subnet is 10.1.0.0/16, and the remote subnet is 192.168.1.0/24. From the remote subnet, I can ping anything on the 10.1.0.0 corporate network, but I cannot ping from the corporate network to the remote subnet. At first I thought this was something obvious, perhaps an incorrect acl or something easy on the corporate firewall. However, we have several other vpn tunnels established, all set up the same, and they work just fine. After looking at it a bit more closely, if I ping the remote subnet I see the hit counter increment by one each time, which leads me to believe that traffic is in fact being routed properly.Now I'm thinking that something in the remote SRP541W that is not allowing icmp traffic, but I can't find it anywhere. To be honest I have never used this type of firewall before, they have all been Cisco PIX501/506e and ASA5500 models.
View 2 Replies View RelatedI'm trying to configure hairpinning on my Cisco 887VA VDSL router, so all LAN users can connect to the server using SMTP port 25 which is also in the same LAN subnet, using external router address, which is assigned to dialer1 interface.Traffic comming in from outside works fine.
External IP: 1.1.1.1/29
PC address connecting to the server: 192.168.101.28
Server address: 192.168.101.200
IOS: 15.1.4M1
[code]....
I'm running tcpdump on the server on port 25 and... nothing happens. The traffic is not going through.One thing that I've notices in debug ip packet is this line:
s=1.1.1.1 (Vlan1), d=192.168.101.200 (Vlan1), len 52, rcvd local pkt
shouldn't source be internal vlan1 IP - 192.168.101.1?
Setup as follows:
Cisco ASA 5510
Inside 172.17.101.249
outside 5.5.5.2
DMZ 192.168.100.1
I have an internal server 172.16.1.202 that is PAT to 5.5.5.103 to allow RDP connections. - This works fine from the internet.I have now been asked to allow our guest wireless (192.168.100.0/24 - DMZ) to access this same external connection.We have 2 cisco controllers, with the guest controller "anchored" in the DMZ.I cannot get this to work.Both the DMZ and inside NAT their internet connections to 5.5.5.2.
We received an ASA5520-K8 through Cisco's Loan program so we could demo it as a replacement for our aging Cisco 3005 VPN appliances. Given that we are a non Cisco shop (except for specific appliances like concentrators and wireless access points), I don't have a great deal of experience with Cisco gear.I started to set to setup the appliance this morning but immediately ran into issues. The 5520 doesnt seem to be acting as a DHCP server, and worse yet, I can't access the unit even if I hard code the IP on the PC being used for configuration. I have to say that I feel kinda stupid having to post this, since I actually followed the documentation avaiable for this menial task and I fully expect the problem to be a simple one. Namely, I am using two specific sources of info for connections.
View 20 Replies View RelatedI have a simple isp topology built in GNS3, for testing (pppoe) dialers:cisco router(R1) connected to my pc network card, doing NAT translations for all the devices in the topology.I know how to configure NAT for spesific ip range, but i can't find out how to configure NAT for networks which are learned through ospf (or any other dynamic way).
View 2 Replies View RelatedI have a 5505 with the security plus license. I have a web server in the DMZ that needs to talk with a server on the inside network but it doesn't seem to be able to. Im guessing there is something I need to do to enable the DMZ to talk to the inside network.
Here is the config.
[code]...
I have setup a few Vpn clients but no ones able to access the inside network.The clients all get a Ip address from the pool and DNS servers Ip's. But cannot ping or connect to there pc's. I'm thining its somewhere in the ACL.
View 2 Replies View Relatedi have cisco asa 5505 Security adaptive firewall. my inside network is 192.168.1.0 255.255.255.0 . i want to add static route another network i have that network id is 192.168.2.0 . 255.255.255.0.how i can add the route.
View 9 Replies View RelatedI have an ASA 5510 which works great except I'm unable to connect to the remote access VPN from inside the network (behind the ASA). Is there a special NAT exemption required? [code]
View 6 Replies View RelatedI configured ASA5520 and RV042 for site-to-site IPSec VPN tunnel.Tunnel get connected, but no ping, no traffic between both end network.
Network:
=======
192.168.113.0/24----------192.168.113.6 -ASA--------public, static IP address------Cisco 2821--------Internet
192.168.10.0/24-----------192.168.10.1 -RV042-----public, static IP address------Cisco 2821--------Internet
ASA5520 config:
----------------------
name 192.168.10.0 VPN
!
interface GigabitEthernet0/1
nameif NET
security-level 100
ip address 192.168.113.6 255.255.255.0
[code]....
this is ASA5520 associate with 8.4(1). very simple scenario , three ports: inside . outside . DMZ my problem is how to use network object NAT to perform Regular Dynamic PAT and Identity NAT.
for example, this is my configuration
**** first i configured Regular Dynamic PAT****
object network myinside
subnet 10.200.11.0 255.255.255.0
nat (inside,outside) dynamic interface
**** then , i met problem when i want to make identity NAT between inside and DMZ****
**** if i add below CLI , the first nat line will be replaced ****
**** SO IF I ADD THIS****
[code]......
I want to transfer big fiiles from PC to another PC, and it has happened frequently, I was wondering is there any way that I can send them directly with high speed if they are connected to the same router (my Router),I got an Desktop with Windows 8 64bit.The target PC (to transfer files) Laptop Windows 7
View 2 Replies View Related