Network Security

Hi ,I have a Cisco Firewall device. I have a server to the LAN side to the firewall. I want to put a nating rule [static (inside,outside) tcp 2.2.2.2 smtp 192.168.30.202 smtp netmask 255.255.255.255] to the device. But it was giving an error (Error: ...

Hi everyone, I need some 9.1 NAT help! Got a subnet,.. 192.168.10.0/24 .. on this subnet both clients and servers are located. I'm currently NAT'ing (server) 192.168.10.10 to our outside interface IP and allowing ports 80 from the Internet.Now, our i...

Hi,I have a problem with a Site-to-Site VPN from ASA to Checkpoint Firewall.The Checkpoint Firewall onyl accept the external Interface IP on if Outside.I moving from pre 8.3 to 9.x. VPN is etablished but no traffic can pass due the inside host addres...

configure identity policies to require active authentication,but no login form display, why?  1Define realm  which contain one AD 2Define identity policy  3Define identity policy object 4Define access policy,specify Identity policy objects as part of...

Hello All Guru'sToday i came with some scenario in which i am having little bit hard time to understand again. Problem is i have a network in which we are running VPN between two Cities Datacenters. Both using 3 Vlans, like:In Chicago10.12.10.x, 10.1...

Is there any tool that can be used to document the ASA access rules to an excel or xml file?The documentation should include source/destination ip addresses, services and action. 

My device has 3 interfaces configured: inside, outside, DMZ.  Right now I can access the Mail server from the Internet using domain name which is on DMZ interface. The issue here is when users  they need to configure their Ms Outlook for Incoming mai...

Hi allNeed some help regarding ACL configuration.Let's say I have an ASA with 4 interfaces (A, B, C and outside. Security levels for A,B,C are equal, outside is less)All clients on networks A,B,C are allowed to connect to outside. In this case I don'...

Looking for direction on where to isolate why the source (a.a.a.a) is not able to establish http connection with dst. I see these entries in the logs on the ASA.Apr 24 2014 18:12:10: %ASA-4-106023: Deny tcp src AHMCORP:a.a.a.a/47991 dst inside:172.16...

Hi, Is there a way to access the asa in a failover pair that is in standby mode from the primary asa?IE I am logged into the primary asa via command line and was hoping to access the other asa from here.Thank you.