Network Security

We have an HA pair using 5510s version 8.4(5). The secondary unit is currently active because the primary has an issue. When we replaced the primary (we didn't failover yet) users reported issues with several services including webmail. The time peop...

HiCould anyone guide me how to setup our network.We have 4 WAN, and our network has 4 sub net, likely 192.168.0.x / 192.168.1.x / 192.168.2.x / 192.168.3.xWe would like the computers in the first sub net go for WAN1, and computers in the second sub n...

do the sub-interface of ASA firewall has limit of bandwidth? or how does the bandwidth of the physical interface divided among the sub-interface? is there a cisco documentation url link that explains this?

Hi,I have a ASA 5505 with base 50-user license deployed for a 15 people branch office. But recently ASA started to block internal host since license reached MAX 50.I did show local-host on ASA and then manually filtered output in spreadsheet and ther...

I would like to block networks 10.0.0.0/24 through 10.0.239.0/24 from accessing networks 10.0.240/20I've come to the conclusion that the best way of doing this is with 4 separate acl's:ACL 1 - 0.0 - 127.255ACL 2 - 128.0 - 191.255ACL 3 - 192.0 - 223.2...

One of our customers have an ASA facing a Checkpoint HA cluster. Looks like the Checkpoint cluster is using ip messages sourced from 0.0.0.0 to the network address on udp port 8116 to keep track of eachothers interfaces. This traffic is interpreted b...

hi,i recently upgraded an ASA pair from 5510 (ASA OS 8.2) to 5512 (ASA OS 9.1). Many of the services are working fine including VPN after some tweaking and modifications in the new configuration, however the exchange server is not sending the traffic...

Hi ,I have a Cisco Firewall device. I have a server to the LAN side to the firewall. I want to put a nating rule [static (inside,outside) tcp 2.2.2.2 smtp 192.168.30.202 smtp netmask 255.255.255.255] to the device. But it was giving an error (Error: ...

Hi everyone, I need some 9.1 NAT help! Got a subnet,.. 192.168.10.0/24 .. on this subnet both clients and servers are located. I'm currently NAT'ing (server) 192.168.10.10 to our outside interface IP and allowing ports 80 from the Internet.Now, our i...

Hi,I have a problem with a Site-to-Site VPN from ASA to Checkpoint Firewall.The Checkpoint Firewall onyl accept the external Interface IP on if Outside.I moving from pre 8.3 to 9.x. VPN is etablished but no traffic can pass due the inside host addres...