Network Security

Hi All, ASA is working on 8.0 and I would like to bypass NAT which from 10.131.3.0 to 10.130.8.0. Refer to nat0 document, it is clearly stated that nat0 is worked for bypassing NAT. However, I want to clarify, refer to below configuration, if nat0 st...

I have a firewall service module in a 6500. Lately traffic from lower interfaces within the LAN is not forwarded to higher interface.  Created a capture and I can see traffic on the ingress interface and its not forwarded on the egress interface. I h...

There has to be a better way to insert a Static NAT into an ASA.  I am hopeful someone can give me options. Our ASA had many Static NATs from inside networks to various other security zones: static (inside,dmz) 1.1.1.0 1.1.1.0 netmask 255.255.255.0st...

I have two problems with FireSight/FirePower (ASA 5525).First problem is that custom HTTP response when I block some traffic by URL filtering sometimes is not shown to the client. I´m appliying the rule to different network segments tied to two diffe...

I recently had an issue with out PIX 506 firewall, i had to do a reload which seems to have sorted the issue.One of the problems i had with this firewall is that it never saved any info after i would configure it, so.e.g. i'd use the command username...

I have ASA (ver 8.4) with 2 ISP connections.Can i use Policy based NAT to have specific traffic use one ISP connection over another.  say I have a User VLAN 10.10.10.0/24 and a Server VLAN 10.10.100.0/24.I want Users to use ISP1 and Servers to use IS...

For ASA5506 can I export a report that explain every user which websites visit and what bandwidth used ?

what is the differnce between failover link and stateful failover link and also between stateful and stateless 

what is system context in asa

Hello!I configured logging via e-mail for messages related to the Cisco ASA botnet filter. It should send syslog messages to the admin when the botnet filter recognizes traffic from infected hosts :logging list e-mail-notification message 338002loggi...

We have a bandwidth issue getting from our colocated site (inside gigabitethernet0/1) with an ASA5515 configured on Warehouse gigabitethernet0/2.40 (VLAN 40) for a 20Mb EVC to our corporate office. We have Level3 as our provider for the e-line.The is...

First off, please forgive me if I posted this in the wrong community. I have a problem whereby we needed to moved our firewalls down in our rack to make space to install a switch. After switching off the standby to move it 2U spaces down in the rack ...