Network Security

Hi All, I have ASA5510 running with Software Version 8.3(2). There are two internet links - ISP1 and ISP2. I want to use ISP1 link for remote users to reach this ASA for Anyconnect SSL VPN access.And ISP2 link should be used for inside users to go ou...

Hi Friends,I have Cisco ASA 5545-x firewall.I have configured all the VLAN's in firewall.When We are trying connect the same VLAN server(any tcp or udp ports )the traffic coming to firewall and getting block.I have already enabled same-security infra...

Hi,I have a ASA 5500 running 9.X image. My Squid proxy is in same network. I would like to redirect my all web traffic (http and https) to Squid box. No idea how do I proceed with best practice ? please help. Thank you.ASA inside and Squid running in...

I am struggling here and not sure what I need to do but think it should be fairly straight forward.  I grew up on old IOS and IGS/MGS/CGS routers but have been out of the industry for quite some time so a lot of the new commands are foreign to me.  S...

I have access to an ASA 5505 over a VPN, it is connected to a switch, the port on the switch that is connected to the ASA is an access port, I made it into a trunk and got kicked off as expected, so on the firewall I made the port that connects to th...

Looking for confirmation!! From the Cisco document: CLI Book 1: Cisco ASA Series General Operations CLI Configuration Guide, 9.1found at URL: http://www.cisco.com/c/en/us/td/docs/security/asa/asa91/configuration/general/asa_91_general_config/intro_sw...

Hi Experts, This time for your advice on below point..1) Recently we were having a vulnerability assessment testing(through a tool) on  network and observation are :-"SSH Weak MAC Algorithms Enabled,SSH is configured to allow MD5 and 96-bit MAC algor...

Hello All, I need to allow traffic thru my ASA for expressway. Per the guide they want a range of TCP and UDP ports open into my DMZ from inside and outside. I thought I wrote this out correctly but, when I check it via packet tracer is says that my ...

Dear all, am having cisco ASA 5515-X IPS  with internal IPS.I did the initial config for ASA and session IPS too configuration (same network), but i can`t ping from the ASA to the embedded IPS. Do route needed or not?I need a resource for initial con...

Hi,Im connecting to my firewall through the console port, and need to know how to reset it to factory defaults. I have looked around online and can not see any reference on how to do this.Any help would be much appreciated thanks.

Hi It has been a couple of years since I last had my hands on the ASA firewall - but a question popped up the other day, which I could not answer.. Is it possible to do policy based destination PAT from the outside to inside interfaces - based on sou...

Hi , I have some services running behind  fwsm . sometimes i am not able to connect to the services behind fwsm .for example services running port 8888,i have permitted icmp .but i cant ping the interface ip. (192.168.111.1) .server behind fwsm are i...

I want to access Web Server from inside. My Web server is located in DMZ (IP:192.168.4.11). So how to NAT and create ACLs??? P/s: my English is not good!!! :D   

Below is my configuration setting a tcp half closed sessions applied to the outside interface. ACLaccess-list tcp_timeout extended permit tcp any host static_mapped_outside_IP eq 443  Class Map  class-map tcp_timeout_cmapmatch access-list tcp_timeout...