Network Security

Hi all, In the diagram, I'm going to build connection from PC1 to PC2 via 2 VPN tunnels. Now, I observed the traffic in ASA2 > VPN2 seems normal (i.e. encaps and decaps are accumulated) access-list outside_cryptomap_440 extended permit ip 10.130.107....

I seem to have trouble with URL filtering not working. Using the categories to block traffic I have selected all gambling and social media to test blocking works fine. Default action is Trust All Traffic and i have a rule blocking all inside to outsi...

Hi guys, My current configuration which I need to validate is an ASA port-channeled to the core.  I am placing the appliance Inline.  I have 1 inline set with 2 interface pairs.  One set of interface pairs are for the Appliance towards the firewall a...

Dear Sir,                  My Static NAT rule is not working , When my pc ( 192.168.10.33 ) go to destination outside ip is not use 192.168.200.11 . ASA is translate with range 192.168.200.20 192.168.200.200 . So I think My Static NAT Rule is not wor...

Hi, We have Cisco ISE version 1.4.0.253. We're trying to install user certificate via client provisioning by using  WinSPWizard 1.0.0.46. Our tests worked well on windows 7 (64 bits) , but we are not able to make it work with windows 8.1 (64 bits) ! ...

Hi Guys,   It seems there is a openssl Vulnerability for ASA. How to patch it, for ASA version 9.4.1 and is there any software update for it. Regards, G.Pitchaimani

Hi guys, I have this weird OSPF behavior and I don't get it... I'm running version 9.1(4) on ASA5512, this is the output for some of the routes: FW1DC1# sh verCisco Adaptive Security Appliance Software Version 9.1(4)FW1DC1# sh route | inc 192.168.30....

Hello colleagues, I follow this path for the upgrade but I have a question.  (http://www.cisco.com/c/en/us/td/docs/security/asa/asa91/upgrade/upgrade91.html) I need to Know if i need upgrade the license or it is not necessary. ASA: 5510 with 1024 RAM...

Hi All, Can anyone please explain me the actual purpose of ' crypto ca  authenticate' command. I have read that this to trust the CA certificate. What would happen if we are not authenticating a trustpoint? CF

Need some advice/help on a firewall issue. Not sure this is the forum I should be in, but anyhow this is the issue: I got a Linux box hosting Nagios that is on the inside interface of a Cisco ASA5510. The Windows boxes I monitor are on the outside in...

Hello, At some point Cisco Real-Time System Loggin was turned on via CLI and whenever I use putty now to go into the CLI the real-time logging is running. I can't stop it. I tried everything I know, ctrl-z, q and nothing is stopping it.  Can someone ...

Hi. I have two ASA 5500 series. One used as internet border device, second is used for subdivide internal enterprise network. I connect to enterprise network remotely via first ASA and try to connect to management interface of the second one. When i ...