Network Security

Hello, I've recently come into the firewall world with the Cisco ASA and have done troublshooting on it, togheter with the creation of changes. I have installed a few on smaller sites. I'm now facing a challenge that would require me to look into a d...

Hi , I have a cisco 5585 in multi mode and have 38 Transparent contexts configured and 2 routed contexts configured.  I want to use a /24 subnet as a management subnet all the transparent firewalls and a separate /24 subnet for all Routed firewalls,I...

I have a vpn tunnel that has been working but just recently stopped. I haven't made any changes on my end but I am not convinced that they haven't on the remote end. Here is what I get when doing a show crypto isakmp sa detail:6   IKE Peer: 1.1.1.1  ...

Hi All,One of our Active firewall got hung up and didt get any console access. Then we rebooted the firewall, in order to find out what could have gone wrong, I collected the configuration and logs from the other firewall during the problem (i shut t...

Hi all, We are trying to add SIP to our ZBF inspection. But rather than just adding match protocol SIP and seeing instant results, we get a protocol violation error on the firewall. Ive done some reading and most people claim that there was a bug in ...

Dear members,I'm trying to add a 'simple' rule for a resource internal to our network to be accessed from various external locations, I've added the rule under 'Access Rules' and entered the port required, it works fine if I leave 'Destination' to 'a...

I have a customer that has had issue with RDP.  They try to RDP from 10.10.32.20 (LAN) to 10.1.2.248 (VPN external).  I pulled the following from the logs:Jul 21 2015 12:54:08: %ASA-5-305013: Asymmetric NAT rules matched for forward and reverse flows...

Hi, We use the private space 10.0.0.0/8 for our corporate inside resources. One of our office has 10.29.0.0/16.We created a Site-2-site connection between 2 ASA between corporate network and office. This VPN works fine. From our corporate network we ...

I need help understanding the packet flow through an ASA and understanding packet tracer results. NAT Control is enabled on the ASA.  Using ASDM, I updated an ACL on the ASA with the following: acl_1out line 1 permit udp host origination_host  host d...