Network Security

Hi All, Please correct me If I am wrong. I am upgrading from 8.0 to 8.4. One of my customer has nat rules in 8.0 as belowFor all the access lists for below they used permit ip any anynat (inside) 0 access-list xxxxxnat (outside) 0 access-list xxxx ou...

i'd like to change the outside address that my 5540 listens on for our ipsec vpn clients, where exactly do i change this?  perhaps in nat rules (tcp 1000?) we have a /29 and i'd like to replace our pix that is serving as our vpn and would love to reu...

Hi All,Recently observed constant high cpu in asa firewall with version 8.2.5 - 80% utilization. The process consuming more cpu is - tmatch compile thread around 60%. Do you recommend downgrade to 8.2.3 or is it an opened bug in the current version 8...

I have an ASA 5512 running asa915-smp-k8.bin I enter the following commands and get this error.FW-5512-ASA(config)# object network TCP_OWA_443FW-5512-ASA(config-network-object)# nat (inside,outside) static interface service tcp https httpsERROR: NAT ...

how to allow only HTTP traffic to a network at the ASA equipment Thanks for your help

Hello,I'm currently facing a problem in our environment, of which I'm not sure how to solve.There are 3 Firewalls:  "Customer" -----vpn------ "IT"------vpn------ "DC" There is a VPN tunnel between "Customer" and "IT" that is working. No NAT is used. ...

I want to PAT traffic from the remote sites after it arrives at the ASA from the site 2 site VPN and as it goes out the "inside" interface. See attached diagram.I want traffic from 192.168.90.0/24 to be PAT to 192.168.36.90 as it goes out the "inside...

Hi expert, i have cisco asa 5515-cx with software cx version 9.1.1 (1)  the problem is when i try to block facebook games but is not working. any solution for this regardsFirhan

I have 2 ASA'sOne in  production with a DMZ connection to a second one that I am using.(called lab)From within the LAB ASA I can ping to systems on the lab site and to the  internal interface on the production ASA.When I am on a Windows server in the...

Hi,Following ports required to access ESXI host via vSphere client from outside WAN.902 Incoming and outgoing TCP, outgoing UDP443, 903 Incoming TCPI have added IP NAT below on our Cisco 1800. Able to login to vSphere. however, unable to access virtu...

Hi,I am new to this field.Kindly suggest how to enable IP spoofing on ASA.Regards,MItesh Manwtakar

Need help configuring ASA to allow tftp download: cannot download tftp timesout Device 1 --> (Port 9 )Device 2 --> port 1(Device 2 ) --> switch --> tftp server Device 1 is sitting at rommon prompt. I would like to download an image to device 1. Devic...

Dear,In my FWSM have the version 4.1(5) and yestarday I saw in the FWSM when I put "show disk0:"FWSM# show disk-#- --length-- -----date/time------ path  1 0          Mar 01 2000 11:19:34 .private  4 0          Mar 01 2000 11:19:34 .private  7 0      ...