Network Security

Hey all, I have an ASA with a 50 user limit. Below is the current "Sh local-host" output and I just wanted some clarification on what exactly some of it is.  Detected interface 'outside' as the Internet interface. Host limit applies to all other inte...

Hello,in our internal LAN, I have some different servers, which can be access from the Internet by different ports. I do this by using NAT with specific services.So let's say, we have the following IP addresses:External IP address: 1.2.3.4External do...

I'm trying tu publish my Polycom codec outside, and i did for this purpose static NAT according asa docs.interface Ethernet0/0 nameif Outside security-level 0 ip address X.X.40.98 255.255.255.240object network HDX6000-INT host 192.168.42.33object net...

Hi,The user can login with their valid AD account. The remote laptop receives a correct IP address from the ASA IP DHCP pool (192.168.210.231-192.168.210.250). However, the remote laptop CANNOT communicate with other internal networks (i.e.: PING). T...

I was trying to perform NAT-C on ASA 8.2. The setup was pretty simple. I had an Inside (Security-Level 100) interface, DMZ (Security-Level 50) and an Outside Interface (Security-Level 0). I wanted to perform Nat from DMZ hosts to Inside hosts. When I...

Hello all,We have two Cisco ironport C370 appliances.There is one Product Authorization Key for the ESA Inbound Essentials SW Bundle (AS, AV, OF) License.And there is a term called "entitlement quantity" for the ESA license.The value of "entitlement ...

Hi AllThis is my case: In the lab I could configure mDNS on my 5508 with the global multicast and igmp snooping disabled. Only I needed was Global mDNS multicast enabled (based on Cisco Guide) and it worked fine under the following scenarios:All the ...

Hi Guys,I have 2 ASA 5520 to upgrade from 8.0 to 8.2. Can someone please send me the instructions on how to do this? Any help will be greatly appreciated. Thanks,Lake

Ive got a PIX between two internal networks. the 172.16.0.0 is on the inside. 10.0.0.0 is on the outside. I need to manage several servers on the inside from a device on the outside. There will be tcp and udp traffic initiated from the 10.0.0.0 netwo...

Hi,I have a question. Within a single mode ASA 5585-X config, can you have regular firewall, Anyconnect SSL VPN and SSL Web VPN running together with Dynamic routing? Thanks

 I have Cisco ASA 5500 8.4, with NAT configured from inside interface to DMZ to be dynamic translation of Interface on DMZ.So, any traffic sourced from inside, going to DMZ, looks as if sourced from DMZ interface:object network obj-10.0.0.0 nat (insi...

A client I do work for reached out to me today with an odd issue.  There are a handful of secure websites they cannot reach from one location.  I checked the ASA logs and 30 seconds after the initial packet, the ASA receives a SYN timeout packet.  Th...