Network Security

Hello,I have an IPSEC tunnel to a vendor who I can reach and i see encaps/decaps. When he tries to ping my IP 192.168.26.10 i decap but can't encap. Can any one assist?cleaned up config below. Please let me know if anyone wants to see more.! !interfa...

Hi All,I need to set up a restricted account for some junior's on my ASA's, so I have built the following:aaa authorization command LOCALprivilege show level 3 mode exec command vpn-sessiondb l2lprivilege show level 3 mode exec command crypto isakmp ...

We have an ASA 5510 with 3 connections, outside, inside and point2point running version 8.2 without nat control. We need hosts on the inside interface to communicate to hosts on the point2point interface. When we use the same-security-traffic permit ...

We are getting a new internet circuit with a new block of addresses. How do I quickly update my access lists with the new public ip address? Any help would be appreciated. Thanks

Hello,I have changed out the CCO username and password for an IPS configured for auto-update but cannot get the IPS to correctly update its signature any longer.  I have verified that the CCO login is correct and that it can download a signature file...

Hello all,I have a Cisco 2901 router running 15.3 (M3) that I am trying to setup a basic firewall on.  I want to remote console into computers from only certain IP addresses.   I've created the objects and rules below and applied  then to the subinte...

Hi,any advice on real-world performance of an ASA 5505? I have run into crash-and-reboot issues with my 5505 after setting up a pretty big ruleset. The ruleset is created by a script (http://stefan.gofferje.net/it-stuff/cisco-systems/201-block-a-whol...

Hi All, I am having some difficulty with what I believe is a NAT issue.We have a Cisco ASA 5520 that we have a large amount of sub-interfaces on.Some of these sub-interfaces have public IP address ranges, whilst others have private IP address ranges....

 Guys, How do I achieve this port forwarding on ASA 5505.. Here is the situationI have one host on inside lanHost IP: 10.0.0.9Outside ip: 65.65.65.100 (just an example) So if a user from outside ssh into port 65.65.65.100:557, I want that traffic to ...

Hi All,We have a Cisco ASA 5505; we have just upgraded our internet service with Comcast and with the information they have sent me, I'm not sure how i would configure our ASA with the two different subnets on the outside interface.This is what they ...

I have an ASA 5510 running 8.4(4)1 here is what I am trying to accomplish.Setup.....internet --> ASA ---> core switch and connected to core switch is a Meraki MX60 that will be a VPN concentrator for some Meraki Z1's What I need to setup is port forw...

Hello guys,I'm enabling a cluster of ASA 5520 and after insertion of the appliance 3DES key was with ASA 5510 features For example, the interfaces are FastEthernet and GigabitEthernet rather than as native appliance. See the "sh ver":ciscoasa# sh ver...