Network Security

 Hi All,Few urls and application are changes their ip address frequently, we dont have any information of that ip pool.Can we configure nat in that wat where we dont need any destination ip address. Like when my users will try to access xyz.com and d...

If I want logging for the "internet" facing context on an ASA, do I have to configure logging on that context, or will the logging on the admin or system context also send logs for the other context? 

Hi I have a test mail server I want to access from the internet and I'm trying to configure nat I just have 2 vlans inside and outside and I want to use the ip address of the outside interface but the asdm config is confusing please see attached imag...

What are the conditions for this event to trigger ? does it trigger even if there is one packet without any of the flags syn, ack,fin,rst or if there are 10 in 50 packets without the flags set ? 

  Hi , In our environment  having ASA 5545 ( IOS Ver 9.1) Firewall and In there AES 256 CBC cipher encryption is enabled for SSH user access.we need to disable CBC cipher encryption and enable the CTR Cipher encryption for SSH users.Kindly help me fo...

Dear AllI have an ips module (ASA5585-SSP-IPS20) in promiscous mode which shows Sensor health  missed packet critical sometimes and sometimes shows needs attention.All other parameters are normal in sensor health.This ips is connected to Serverfarm f...

Hello i upgraded my ASA 5510 with OS 8.2 fail over pair a month back to new ASA 5512 with OS 9.1. Almost all services seems working fine except the authentication of the device itself. My primary node is able to be authentocated via ACS and even the ...

HiI have tried to allow traceroute for one PC for the testing purpose, but it is not workingModel : ASA 5515x Version : 9.12 And also allowed below access list, but still user getting * * * access-list acl_out line 1 permit icmp any any echo-replyacc...

Hello All:I am in the process of cleaning up an ASA 5510 that I have inherited and have a question about applying a new ACL to an interface that is working correctly now with another ACL. The main purpose is I want to change the name of the ACL an cl...

folksi have an asa 5540 running 8.4 (6) which i use for ssl vpn to its outside interfacethe appliance has started dropping existing vpn sessions and refusing new connectionswhen i try to telnet to its outside interface its not listening on tcp 443if ...