Network Security

ASA is dropping all traffic to the interfaces.  Routing is fine as traffic FROM the ASA reaches anywhere needed fine.Via the packet capture it can be seen that the implicit deny rule is blocking traffic.  I have added an any-any rule (as this is test...

I am having issues with a new ASA deployment.I have an inside interface connected and routing into my network (I can ping pretty much everything I need to).  The issue is the return traffic.  All return traffic seems to be being blocked despite the f...

Hello All, Can we share an interface with more than 1 context. Say if I want to use interface Gig0/0 as DMZ/Extranet interface can I use the same  interface in more than 1 context.   

I am trying to open video conferencing tcp port 1720 (h323), which would allow IP Video Conferencing calls to be placed to our Business. I have tried several commands, but its not working out. The Global IP address is 64.xx.xxx.70.I have used command...

Hi guys,I tried to upgrade a 5540 ASA from 8.2.5 to 8.3.1. When I did I got a huge amount of errors in NATs as per the unidirectional feature...Is there an automatic way to check my current configuration to fix all the misconfigurations? This company...

Salam Aleykum.I have ASA5525-X which have problem in flash memory.I formatted flash: or disk0:  ,  used  fsck tool. it solved my problem temporarily. BUT, after fiew hours  flash got corrupted automatically.  I do not understand the problem.I decided...

Hi,I have generated the following CSR and trustpoint, but it is not showing in ASDM, I can see it in the cli via "show run":crypto ca trustpoint ASDM_TrustPoint0 enrollment terminal fqdn mydomain.com subject-name CN=myCN,OU=IS,O=JSP,C=GB,St=United Ki...

 The topology I have is as follows:Internet --> Router (with Public IP) --> ASA (with Private IPs) --> LANWhat I'm trying to achieve is for remote workers to be able to use the Anyconnect client to connect back to the office.  Can you please advice i...

Hi,We have a ASA5505 and its set up with a DHCP server, but we can't resolve host names of internal devices. Can anyone give me some pointers on how to get it set up so we can?Thanks. 

Hi All,I have been trying to upgrade the software on an IPS-20 module which is part of an active/ active ASA 5585-X set-up.The original software version was 7.2(1) and we wanted to upgrade to 7.3(2) - which has the advantage of supporting SNMPv3.The ...

"show ip access-list", IOS displays matches against each statement within the ACL and you can see counters incrementing or not, useful in troubleshooting. Nexus 3548 does not display any counters with the same command!I must be missing something beca...

I'm trying to get my VMware vCenter server to add a host on another network. I have applied a rule on my ASA with all the known TCP/UDP ports that vCenter uses.vCenter lets me add the host but it disconnects almost immediately, and at that moment I s...

I recently acquired a used ASA 5505 and have encountered issues with getting the PoE output on Ports 6 & 7 working. Theese two PoE ports are behaving like all the other ports (100mbit, Vlan 1). Per the best I could Google, I made sure the all relevan...