Network Security

I am configuring an ASA5505. I need to have accesso from outside to inside. Someone can help?. Here's the configuration : Saved:ASA Version 8.2(5)!hostname ciscoasaenable password 8Ry2YjIyt7RRXU24 encryptedpasswd 2KFQnbNIdI.2KYOU encryptednames!inter...

We have configured ASA Active standby failover with ASA5505 . When primary unit power off, secondary unit became active. when primary unit power on, then primary unit is becoming active again. i think for active standby setup there is no preemption. ...

Hi All, From What I have learnt regarding access lists, if there is a global access list, it will be checked after checking the interface access list and the "deny ip any any" will be at the end of global access list instead of at the interface. Ques...

hi, I am migrating from FWSM to ASASM. A question about the ACL migration. On my FWSM, I use the natted IP as destination in ACL. I know we will use the real IP on ASASM. But will the migration step can translate the whole ACL from natting IP to real...

Hello All,Since I was told that U-turn (or hairpin) traffic is allowed by default on a zone based firewall I decided to create a zone-pair like following to stop this from happening in case if somebody decides to hairpin thru my router using it as ju...

I have a number of ASA 5505 boxes which I need to reconfigure to work with a Watchguard XTM 850 over IPsec.  The 5505s were previously configured to connect back to a 5510 Firewall using EasyVPN.  With EasyVPN still enabled, the remote boxes attempt ...

I started working with the ASA 5512-X with CX (Prime Security ver. 9.2.1.3-11) IPS, AVC, and WSE enabled.  Is it possible to send out alerts on detected threats, malware, and other events using e-mail?  Or do I have to do it via the firewall side or ...

Hi all, we have two asa 5510 in Active/Standby fail over mode with AIP-SSM modules. We have urgent requirement to reset AIP-SSM module. Is it possible to do this without triggering fail over on asa. Somewhere its mentioned that its possible by removi...

Hi all,I have ASA 5545x with IPS module and i will be very appreciate if someone help with problem - IPS AutoUpdate trouble. I check all neсessary troubleshooting steps: ·         Signature updates require a valid Cisco Services for IPS subscription ...

I have recently confgured my AIP-SSM-20 module in my firewalls (ASA 5540) which are configured in HA(Active/Standby).This implementation i have done on 13th June. It was working fine.Now, i have observerd that the AIP-SSM-20 module in the primary fir...

Hi, I have a Asa 5510 basic with two ISP, one DMZ and LANMy default GW is ISP1 and it have a the lowest weight. the other ISP2 have the route 0.0.0.0 with a more weight.My network is :We need that SRV2 go to internet using a IP for ISP2, but when i c...

So, as some background, we have been happily running ASA 8.4(3) for some time.  But we actually first experienced this problem a while ago when trying to upgrade ASA software version but downgraded back to 8.4(3) again, the problem went away, and it ...