Network Security

Dear Colleagues,   Please help me to solve NAT translation issue. I have ASA v.8.4(5) image. I need to implement static port forwarding translation (to forward packets from Internet to DMZ server when connecting on custom port TCP/17887) Server in DM...

I'm trying to get some clarity around what commands would be needed to allow an ipsec vpn client sitting behind a Cisco IOS zone-based firewall to make ipsec connections through to a vpn gateway out on the internet. This is the sort of thing that is ...

I'm trying to understand the relationship between failover groups and contexts, however it appears that the configuration is split in an way that I am having trouble understanding. The interfaces that you actually monitor are configured PER CONTEXT e...

Hello,  We have two ASA firewalls located in different locations.Firewalls are in Active/Standby modes.Failover links of firewalls are connected to two different switches.These switches are connected to each other with two dark fibers aggregated to E...

Hello, guys. Recently we have recieved Cisco 2921 with SRE-170-k9 module.I'm already install Cisco Prime NAM software on it.I get access to web GUI. And on authentication page of WEB GUI a get a message, that "Evaluation license expires in 59 days."O...

Dear All, I have one L3 switch and 5 VLANs configured in it. And i want to connect one 5520 ASA to pass all the vlan traffice to outside.Second, i have five adsl connection and all are configured with bridge mode, connected to the ASA5520. Now i want...

Hi Guys,We are a new service provider for one of our customers and as a result we need to change the external IP addresses for a ASA5505 pair which are configured for Active/Standby HA.I was wondering what the best way to approach this would be. I wa...

Our office has a number of remote employees that use ASA 5505 boxes to access resources and connect their IP phones to our office.  These boxes all connect through a pair of redundant ASA 5510 firewalls.  When we configure these 5505 boxes, we used t...

Hi I have a class c 1.2.3.0/24 that i have on the internet side of my asa5520 currently I use object nat to translate 1.2.3.x to inside addresses like 10.10.24.x I want to route one of these addresses inside now so 1.2.3.10 is NAT to 10.10.10.241.2.3...

Somebody knows if is possible to successfully pass traffic through an interface bridge between a FWSM and the MSFC using an external IPS Solution as inline physical interfaces?In theory should work just like vlan bridging in the connection through an...

Hi, I'm stuck, here is what i need:host1: 192.168.1.1 service tcp/443>>>>> public ip 1.1.1.1 service tcp/443host1: 192.168.1.1 service tcp/80>>>>> public ip 1.1.1.1 service tcp/80host2: 192.168.1.2 service tcp/22 >>>>> public ip 1.1.1.1 service tcp/2...