Network Security

Hi all,if i have a static NAT setup for a subnet... for instance "static (inside,outside) 10.224.100.0 10.224.100.0 netmask 255.255.255.0" so that these clients NAT to themselves and are accessible from the outside, how can I add a policy dynamic NAT...

hi,i am running version 6.2 on ips 4240. could please someone let me have the procedure to upgrade the OS to 7.1.8 please? is this upgrade same as cisco IOS using tftp ? what is the procedure to upgrade ? is it first os and then sensor ? cold you ple...

                  Friends,I have my webserver set up in the DMZ on my ASA5505 but am facing a challenge with my users who i suspect are uploading malicious files through FTP. my webserver in running linux and cannot execute the same files, but when i...

I’m trying to set up an ASA as the main firewall for a charity organisation I volunteer for.I have been given a /29 address by the ISP and have obscured it just for security, in real life only the last octet is the same. X.x.x.40/29 with the router f...

Hello All,I would like to to ask some assistance. Acctually, I am not experience about site to site vpn, especially ASA.I had a problem about configuration, I  already try using manual guide from Cisco, Youtube, and many website. but won't establishe...

Ok I just purchased a 5505.  I am plugging the ASA directly into my DSL Modem. I have a static IP address 71.29.95.9 that the router is configured with. The DSL Modem connects through PPPOE connection. First question: Should I configure the Outside i...

We recently went from single ISP on our ASA to dual ISPs with failover using object tracking.  Dynamic NAT is working great with both ISP.  Using this:nat (inf_inside,inf_ISP1) after-auto source dynamic PAT_Networks interfacenat (inf_inside,inf_ISP2)...

I an very familiar with "end of sale" notices with ASA5500 firewalls bt my question is more on the ios side.Is there a way to find out what code revisions have been deferred or are not supported anymore?In other words lets say I have a ASA-5540 runni...

                   I have a SSL Client VPN configuration setup using both AAA and cert for authentication. I am using internal MS PKI for my cert deployment. My question is what if I also want to do clientless connections to this same ASA. I have my ...

Good morning folks ,I have an issue with asa 5520 on gns3 ,while i am able to ping loopback addresses i can not ping any physical interfaces.have you experiences such behaviour before? Now i need your advice, i have set up this network but i am new t...

Hello All,I am trying to make something work and can't seem to do it, and I don't know if it is because of the way I setup this firewall originally or what, but here are my issues:1) I currently have a guest network setup from the ASA 5505 giving DHC...

I am looking to migrate an IPSec endpoint, with numerous peers, off of an IOS loopback (/32) address to an ASA active/standby configuration.  Is there a recommended configuration for emulating this loopback address on the ASA?  I do not want to apply...