Network Security

Site to Site VPN using incorrect Crypto Map

I am having difficulty with a site to site VPN using the wrong crypto map. When i try to bring a site to site tunnel up with a 3des / sha1 tunnel the, tunnel tries to use aes / sha1. is there a bug in the 9.1 code that could be causing this issue. I ...

ASA 5510 IoS upgrade from 8.0(3) to 8.2.5

Hi All,we have ASA 5510 which we need to upgrade from 8.0(3) to 8.2.5.can we directly switch to 8.2.5 from 8.0(3) , if not what all versions we need to go from.What all point needs to check before that It will gr8 if some one guide around steps & ris...

DMZ Zone

Hi, please advice the command to configure a DMZ Zone in the cisco Asa 5510 Firewall.i have already inside and outside interfaces. All the users need to access the servers in the DMZ Zone and from internet as well.All the servsers i...

Resolved! one DMZ interface with 3 different Server having different listening ports

i have one DMZ interface with 3 different Server having different listening ports in cisco asa 5510

Resolved! ASA 5510 Security Context License

hi all,i got a 5510 with base license. we would like to enable security context on this firewall to isolate our customers.i understand the 5510 will have 2 contexts if we have security plus license on it.we can also add 5 contexts if we purchase addi...

ASA 5510 SIP and One way audio

I am banging my head against the wall as I am trying to figure this out. We have a asterisk based PBX running on a server and it is not VLAN'd or anything as we have a large pipe coming in. We are using NAT and the problem is that occassionally we ha...

ASA 8.2 & AnyConnect 3.1

Good Afternoon,Can I install the anyconnect-win-3.1 pkg in the ASA V 8.2? Thank you in Advance

Resolved! unable to access Internal HTTPS through VPN conn

Anytime I have internal websites with HTTPS connections that do not have valid certificates, our VPN users are unable to make a connection. The wireshark trace shows acknowlegement number = broken TCP. I have run Packet Tracer and it shows a problem...

Resolved! CX Install Issues

We just installed an HA pair of ASA 5525x devices, equiped with the IPS and CX module. I know currently only one module is supported with a future software update coming that will enable the other. We are primarily concerned with CX for now so I am...

ASA 5512 with CX Module blocking SSL/HTTPS traffic intermittently

I have an ASA 5512X with CX Module (version 9.2.1.1) that we have configured to do some content filtering. It was working fine with content control when we realized that certain blocked sites, like Facebook, were not being blocked. The reason for t...

Cisco ASA - OSPF area 0 - cascading context

Hi guysI hope you might be able to help me with an issue with ASA OSPF.Setup (also see attached drawing):I have a Cisco ASA 5550 running ver. 9.1(4). The ASA is running multiple context (routed firewall mode). I am trying to form an OSPF area between...

Any connect License on ASA

Hi, Can anyone confirm, whether I required anyconnect license for remote access/Site to Site/clientless/Mobile VPN on ASA. or I can use these features without anyconnect license. ThanksGoutam

ASA 5585 with dual uplinks

Hi all,I have a firewall cluster with two ASA 5585X. it's currently running with single uplink (Untrust). I have attched a draft diagram with this.site to site (L2L) VPNs peering with untrust interface but Remote access VPN clients connections termin...

IPS integration with CSM 3.1

Hi,We are planning on using the CSM 3.1 for signature updates and tuning for the network module IPS (N-IDS) for cisco 2800 routers.Are there any good reference guides/pointers for this out there?Also is anyone aware of a list of signatures that shoul...