Network Security

Hello All,Could anyone please let me know the difference between below two NAT configurationStatement 1nat (dmz) 2 10.70.0.0 255.255.255.0global (out) 2 192.0.2.0-192.0.2.20 netmask 255.255.255.0  Statement 2nat (dmz) 2 10.70.0.0 255.255.255.0global ...

HiI have an ASA 5515 with a INSIDE interface, GUEST interface, WAN1 (fiber with public ip's pool) and WAN2 (ADSL with public IP).I would like GUEST interface to use the WAN2 ADSL, and my INSIDE Interface to use the WAN1.Is it possible ? In my dream, ...

Hi all,In my scenario I have a remote server communicating with a private local server open to the world via static NAT.Remote server: 1.1.1.1ASA Outside: 2.2.2.2ASA Inside: 192.168.1.254Private Server: 192.168.1.100I have configured static NAT to al...

Hi all, Notebook -- ASA -- Checkpoint -- Server I'm trying to demonstrate failover behaviour which with site-to-site VPN traffic in the test lab. ASA is using 5510 version 8.2.5. I'm keeping to ping the server from notebook side. Then I rebooted the ...

Hello,I'm trying to figure out what the default privilege level is for users that are authenticated to the ASA via a remote authentication server when using the ASDM.the command "aaa authentication http console TACACS+ LOCAL" is used in the ASA confi...

 Hi I have two ASA 5200's in a active\active pair running 8.2. The power was lost to the primary device, was restored. but now the configuration, ip addreses etc are old (over a year). what would cause this? When ever we make a change ot the config i...

Hello,After adding an ASA device and discovering its policies, I get the warning message : "Changes that you make to Remote Access VPN policies might not be deployed if you have not performed a prior deployment". I don't really understand why do I ha...

Hello,I tried to deploy an access-list policy on an ASA v8.4 and I encountered the error "Value of Maximum Flash Space out of range". I didn't modify anything about flash space value, so I don't understand why I encountered this error. Is there someo...

Hello, i have a demo SF DC and ASA (sfr) and would like to span live traffic to the DC so i can present it to the upper management and hopefully have it in budget for next year.My DC is configured, i have ASA added, have licences but not sure how to ...

Hello,I currently manage an ASA firewall which was already configured before the integration to CSM. When I try to deploy some changes made with CSM client software, CSM proposes a configuration that removes some useful access-list. Why do CSM wants ...

I'm working on a  hub and spoke enviroment, for the spoke ( remote sites ) we have 2 routers running HSRP. I notice when EIGRP flaps on the primary router at the spoke I will see a bunch of denies on the firewall at the hub. Is this expected behavior...

Hi,On ASA 5510 8.2.5(50)We are contantly gettin high cpu usage for Dispatch unit process for last 10 hours. The Dispatch unit is taking approx 40% usage constantly.We checked teh following:1. The interfaces.    No error counts, overruns, underruns re...

 Hi.. I have a ASA 5525 ver 9.1(2). I have a inside interface 10.110.10.0/24 and outside network 115.112.94.0/27. I have natted a inside server with ip 115.112.94.10 and when trying to reach this public ip from inside machine, i can not reach this pu...