Network Security

We had a problem with SMTP inspection dropping some regular emails (Cisco 2901 IOS 15.0).The original configuration, made using CCP, was:access-list 102 remark CCP_ACL Category=0access-list 102 permit ip any host 192.168.1.111class-map type inspect m...

Hi,We have  pair of 5585-X running 9.1.x with multi-contexts and IPS SSP60 modules on both ASA. Currently only two contexts are created and both are in failover group 1. While doing failover tests we noticed that once the secondary ASA is active and ...

Hello,I am well aware as how to create policies in the ASA for specific hosts or IPs but what I want to do is create a generalized policy that gets applied to all users on an interface but at a per-user level.For example, I want to have all users on ...

For the last one month we have been hit by DDOS attacks that seem to be using SSDP (Port 1900 UPD). It’s just happed today and it lasted 15 mins…during which time our internet connection (Comcast Business line. 100/20 MB) came to a crawl. No one coul...

 Hi experts, Can you explain what are the features if i load WSE license in my asa? Do it have the decryption mechanism? Thanks 

Hello, I have a 5510, and I did a license upgrade and after that I configured a vpn anyconnect after a reboot, the device shows the prompt but when I want to put or write something the devices is not answering. Reading from flash...!!.Cryptochecksum ...

Hello Community, We have many branch sites that use Cisco ASA 5505 firewalls. I configured each of them to send syslog messages to a specified syslog server back at the HQ, as well as the local buffer. However, the syslog messages are not getting to ...

Following this article I cannot get local lan access to work. http://www.cisco.com/c/en/us/support/docs/security/asa-5500-x-series-next-generation-firewalls/70847-local-lan-pix-asa.html created an acl:access-list Local_Lan_Access standard permit host...

A requirement is to send a TCP Reset (RST) without changing ASA's global setting "service".The protocol for the connection is unknown.My understanding is that actions such as "reset", "drop" or "drop-connection" is for an "inspect" type Policy-Map an...

We have a 515E unit in our school. We have brought in a new c class of IP's and cannot get them outside. We have copied the configs of working IP's sets BUT this will not go out. We can ping it from inside but can not pass it through the unit, help i...

We have a 515E unit in our school. We have brought in a new c class of IP's and cannot get them outside. We have copied the configs of working IP's sets BUT this will not go out. We can ping it from inside but can not pass it through the unit, help i...

I am using ASA 5515-X version 9.1I have created access-list to allow email servers ports from outside. The email server is having static NAT on firewall. But the access-list to ping and to allow tcp ports is not working properly. its working with any...

Dear All,I have ASA 5520 which was running on software version 8.2, I have upgraded it to 8.4.7.Migration process completed successfully and seems everything went good, I just got one weird issue related to the ACLs associated to object group, below ...

Thanks a lot and i attached a diagram hereRequirement:need to pass through traffic from outside to inside and inside to outside. I also attached a diagram with the ip and also tell me one thing that natting is only for private to public or public to ...