Network Security

Hi guys,Maybe someone can explain me something from "sh ver" commandBasically we have ASA cluster - two nodes and if I issue "sh version" of both of them I have slightly different outputGood oneHardware:   ASA5512, 4096 MB RAM, CPU Clarkdale 2792 MHz...

We have a requirement that we monitor a non-routable network at a remote location. The FW is operational for all other functions I am adding the items listed be low Here is the config items on the FW 5505 with base license. interface Vlan1 nameif ins...

I got new asa 5512 with ver 9.1 on it and I am trying to do a static nat, but it did not work. here is my config: object network hst-192.168.0.60 host 192.168.0.60 nat (inside,outside) static 173.x.x.xobject-group service svcgrp-192.168.0.60-tcp tcp ...

Perform Cisco ISE integration with Active Directory, which is trusting relationship with another AD.The user that used to established the connection has full permissions only on a domain controller and the other read-only.The authentication of wirele...

I have new internet connection line and i want to connect it with the primary internet connection through ASA 5510 ver 9.1Kindly i need ideasthe first line is  working fine and want to implement the second line for load sharing purpose Regards 

Hello experts, I had been using normal ACLs for blocking web-browsing (https/http) access for my company users. but recently, we started using DHCP providing auto ip-addrs for users. this means i am no more able to block/allow spicific users w...

i cant access ACS  on vmware  from web browser , note  that  i can ping my gateway , i can  ping host pc 

Investigating an intermittent issue we have with one of our systems, I have set-up a packet capture to look at the traffic going through the firewall.  The problem is, because we have no way of knowing when the issue is going to occur, the buffer can...

Currently have 2 ASA 5510s replicating. Last night I restarted the standby ASA but not it will no longer receive the configuration from the active ASA. This is been working fine for ages so not sure what is wrong. It begins configuration replication ...

I can see the command I need to run from the link below. of how to do it.   However it looks like when it is done, it requires a reboot.  Does this reboot the whole ASA or just the CX module (see below).  You are inside of the CX module, so I am gues...

I want people on the outside going to https://1.1.1.68 to be allowed and be redirected to inside address192.168.168.242outside interface IP address is 1.1.1.65 255.255.255.240Here is what I was going to configure, will this accomplish what I want?obj...

Dear All,If there any way we can retain Physcial Server and VM servers IP address in same subnet and protect using ASA 1000v.Regards,Shajimon M

As per the following MS article, we need to allow TCP/UDP dynamic ports 49152 through 65535 for the Windows 2008 R2 active directory to work if the clients/domain controllers are behind the firewall.http://technet.microsoft.com/en-us/library/dd772723...