Network Security

Hi,We have an issue with active standby failover synchronization in the two ASA 5545 9.1 versions:The synchronization does not happen to the standby unit.Are there known issues?After removing and connecting them directly by a utp cable (including a p...

We are using the ISE 1.2 for a classic wireless guest management solution. all works fine. now we want to customize the guestportal. At that point we are running into an issue. According to the ISE Config Guide we generated the html files: aup.html, ...

How can I configure the Cisco 891 to have Stealth ports on the GRC Shields Up test ?https://www.grc.com/shieldsup

I understand the fix to this problem with the "same-security-traffic permit intra-interface" command but I'm curious if anyone knows the reason behind by RPC on tcp/135 would need to consult the ASA for a host on the same subnet? The ASA is the gatew...

HI ALL Does Cisco ASA 5510 support dual WAN (Dual ISP). Active / Active or Active / Standby? Hugo

Hey Guys,Please check my below configuration commands on asa 8.3>Question 1 : i want to send inside/dmz1/dmz3 internet traffic using firewall interface by PAT , please confirmif  the following commands are correct?I. nat (any,outside) source dynamic ...

One of the logs I see daily is something that looks like this. "Deny inbound UDP from 115.230.124.3/53 to 12.52.478.5/2713 due to DNS Response.  Googling that log tells you that it is an ASA prevention method that shuts down that flow as soon as one ...

I have routers with the c7200-ik9s-mz.124-25c.bin image. I would like to expose firewall rules via an OID, but it didn't seem like there were any pre-installed MIBs which exposed that information. Would it be possible to import a new MIB (IP-ACCESS-L...

Hi,Does anybody have a working configuration from an ASA running release 8.4.7 or 9.1.5 where the From header URI is correctly NAT'd calling from inside to outside?We were originally running 8.4.6 and none of outgoing header URIs were NAT'd. After up...

Hello,I'm thinking of purchasing a new ASA 5512-x, part number ASA5512-SSD120-K9 and just using it as a plain firewall (as if it was part number ASA5512-K9) and purchase the CX license(s) at a later date when funds are available. Is there any reason ...

Hi guys.When configuring Inspect HTTP there is an option to use Default HTTP Inspection Map.Its used here as an example on the documentation;From the Select HTTP Inspect Map window, check the radio button next to Use the Default HTTP inspection map. ...

Dear Colleagues,   Please help me to solve NAT translation issue. I have ASA v.8.4(5) image. I need to implement static port forwarding translation (to forward packets from Internet to DMZ server when connecting on custom port TCP/17887) Server in DM...

I'm trying to get some clarity around what commands would be needed to allow an ipsec vpn client sitting behind a Cisco IOS zone-based firewall to make ipsec connections through to a vpn gateway out on the internet. This is the sort of thing that is ...