Network Security

If 2 ASAs are setup in HA w/ stateful failover enabled and a failover occurs, do all https connections need to be re-established?  The bulk of the connections would be via the outside interface facing servers, while a smaller set would be via OSPF le...

Hi,   Newbie question.   I have a 2960x with 3 VLANS (native VLAN is 1), already configured and working, in the sense that a PC on VLAN 1 cannot see a PC on VLAN 2 or 3. That is all I need. I do not need to do inter-VLAN routing. Nor do I want to use...

How to enable traceroute traffic flow for all directions & interfaces in ASA Version 9.1(7) ?    The reason was traceroute frm PC meet with *** time-out when it reaches firewall.

Hi,   I'm tryng to load asdm image on asa using tftp but it fails. I simply configured a port on asa with an ip and put my pc on the same subset. I can ssh to ASA from my PC but cant connect to tftp on my PC. I set wireshark but cant capture any tftp...

Hi All,   We are getting  TCP Reset-I and TCP Reset-O messages in the logs. We like to know which end is sending that and where the problem lies ?   Any help would be much appreciated.   Please find the attached logs.     Thanks.    

Good day everyone,   I would like to ask if it is possible to configure site to site vpn on an active-standby firewall reaching 1 peer but using two different interfaces outside1(isp1) and outside2(isp2). Our goal is to have site to site vpn on both ...

I have a management network for most all of my gear which sits in the same network as the management interface on my asa 5516-X interface. It's basically a simply L3 vlan that all the management interfaces on servers, network gear, etc connect to. On...

Hi All    I have been given requirements by out it staff that they need to configure a server with a public IP address , This would not have a NAT , Can any one explain if its possible to protect this server behind our firewall ? As this will be on t...

Hey Folks, were trying to move DHCP off of our Firewall right now over to our Server that is running DHCP. I take it that as long as we have identical scopes including the reserverations and changing lease times for our machines to get new DHCP lease...

Hi, We have ASA pair configured with Act/Stby. failover cables are connected via a switch as both units are located in two different locations. We have one issue when primary unit become active and reload the same box (primary unit) get always comes ...

 I am still leaning the cisco ASA and need some help with my tunnels. I was able to stand up and connect a VPN tunnel to my site successfully. The tunnel connects without issue and seem to be reliable in that it stays connected. One end is a Palo Alt...

Hello,   I have been trying to analyse existing traffic on an ASA and need to figure out active (not stale) xlate info. If I issue 'show xlate' , it gives me: Global 192.168.1.1 Local 172.16.1.1   So, how do I find out that if this entry  is actually...

Hello,   Can someone shed some light on the following questions please? 1. What is the scope of show conn table?     a. all connections through the ASA     b. from lower security level to higher security level     c. from higher security level to low...

Dear Team,   I have a strange problem with VPN site to site ASA one way the VPN is up with transmit and receive traffic showing the other way the VPN is up with transmit only  I tried to recreate the tunnel on both sides but still the same the proble...