Network Security

Hi guys, i am facing the issue that a high amount of packets drop occour at the dmz interface of my ASA and result in a poor performace.I think its due to overload this interface but i am not sure. I think these are caused by FIFO drops.  Maybe you c...

Hi All,ASA8.4I have only 1 single IP to play around with on the outside interface.There is a need for Anyconnect VPN Access to the outside interface Existing config: Static 1 to 1 NAT(DMZ server) to outside interfaceobject network DMZ_Servernat (any,...

Hi All,Need your advise on procedure to rename ASA interface on live firewall.I have prepared a workplan to rename an interface on ASA 8.3 as below.Will there be any impact the existing live traffic going through the intrface?========================...

My customer has a HQ office and many Branch offices. In the HQ there is an ASA5510 configured as a default gateway, From HQ customer must access to internet (everythig works fine), from Inside LAN should reach to anyway including special services lik...

Hi All,we have cisco asa 8.2(5), observed that snmp server is not getting the reply from the standby firewall sometimes for a fraction of seconds and some times it lasts for 5-6 mins, and automatically it comes up. Snmp server is getting connected to...

Hello, I have an ASA 5505.  I am trying to open ports 8100,8200,8300,12778.  I am testing these ports are open from telnet: telnet x.x.x.x 8100  etc.It fails to connect.  However I can telnet to 80 and 3389 just fine.This is the config line I am usin...

Is there a way to configure an ACL to automatically expire and delete itself after a set amount of time of not being hit. For example:Say I configure a specific rule permiting a specific user using a static IP address to traverse Network A and hit an...

HiPlease find below my customers running config. Everything ok apart from static nat. I cant connect to servers using rdp on port 389, 390 or a device using port internal 443 external 8443 for secure HTTP. From the router i can ping the devices. It w...

Hi All: First-time postHave Cisco 1921/K9 v15.2(4)M3. Want to add SCTP protocol(132) to existing NAT'ed LAN host. Is all I have to do is build ACL's for inside & outside interfaces?Thks in advance for your tipsDaleM

hello i need ddos protection i hope it can protect 10-50gbs500-900$

Guys, It's a basic question about how transparent mode firewalls communicate with the connecting switches.My understanding is that if I separate the LAN eg. 10.1.1.x with a transparent firewall than it will only "snoop" the traffic and will not chang...

Hello, I am planning to setup Active/Standby for ASA.  However, I am not sure is it those active/standby support port-channel setup?    And any example and items need to take care?Which I would like to increase to bandwidth from LAN to WAN with ideal...