Network Security

Hi Experts,I have a Cisco ASA 5510 8.4(3) and it's network interface is having some issues.I have ethernet 0/3 which is configured to be a PPPoE interface, complete with MTU and security parameters given by my ISP.Both the network interface LINK and ...

Hi.We have a client that is currently have to citrix connections setup.One i the primary and the other one the secondary. Secondary is only used whn primary goes down.The entry for both primary and secondary is different locations.The issue is that w...

 Hi Everyone, We have server configured on inside network on inside interface of ASA.Also i have port forwarding configured on ASA so that i can reach this server from outside world using https. Need to know how can i  reach this server from inside  ...

Hello, all. I have two ASA's, each with Dual ISPs configured as well as redundant L2L VPN's. I don't have any issues with my L2L connections. On one ASA I see the following at all times when I run "show crypto isa": Active SA: 1    Rekey SA: 0 (A tun...

I would like to create a NAT rule that includes multiple original services. Currently, I am only able to add one original service even though I have service groups configured on the device. I need a public address translated to a private address, but...

We have two Cisco ASA 5545's fronting our Internet traffic a lot of it comes from Akamai. Because we use a CDN if an attacker uses them to start an attack the ASA is seeing an IP from Akamai that is allowed.  Can the IPS or IDS read the X-Forwarded-F...

 hello guys,were can i get a signature file for uploading it in the isp Module.Is it possible to see the status which, or if a signature file is loaded ?,or can this only be done after configuring a sensor ?The unit was bought as ips version, with pr...

Hi,I recently came across a peculiar cisco asa fail over issue where the device failover occurred when some of the interfaces went down even though the interface were not configured to be monitored.I have verified the below mentioned possibilitiesa) ...

We have had a single ISP for years with a  public address space 203.xx.xx.xx/24, now we have just got another ISP with a 220.xx.xx.xx/28 address spacenow when I  do my natting I obviously want the appropriate public address to go thru to the correct ...

Hi, I have a single host that I want to static nat a number of services to. I want to use service object groups to simplify commands. I guess the beginnig is:object-group service OG-SERVICES-INSIDE-MYSERVER service-object tcp destination eq ftp servi...

So, I have been presented with an interesting challenge. I would prefer using an internal Linux host to solve this, but my manager is convinced the ASA can do this. Hope this is the correct group. This is a NAT and routing question.We have two VPN tu...