Hello,We are using a hosted VOIP provider and we have been ask to open up RTP which I think is UDP to their public cluster IP range, how do I enable RTP - Real Time Protocol? Can't find anything via the ASDM.Thanks
I set up AAA authentication for traffic going through my firewall. That causes the PINGs to be denied. I assume that is by design. What protocols would cause a prompt to display so the originator could traverse the FW? I'm not sure how AAA ...
We have the following scenario: Site01 is our primary site containing a webserver behind an ASA.This Webserver is statically natted to an outside address.A DNS address is pointing to this outside address.Site02 is our backup site containing the same...
I have configured Basic firewall on my cisco 2911, I want to open port 80 for a packaging machine IP (192.168.0.28 255.255.252.0) which uses tcp port 80 to connect with live ip of its server in case of any technical problem, so that support technicia...
Hi. I've noticed that my IPS is blocking this: Novell ZENworks Desktop Management TFTPD Code Execution: sig ID:36790It also signalling that I am an attacker.Two Linux machines and one Windows Server 2008 R2 are classified as those attackers . Does ...
Hi Everyone,Need to understand about object-group network belowwhen i run the command sh run object-group id subneton fw1 it showsnetwork-object 10.0.0.0 255.0.0.0network-object 172.16.0.0 255.240.0.0network-object 192.168.0.0 255.255.0.0Same com...
The setup is simply this: Verizon D-Link DSL Modem/Router in bridge mode (ethernet ATM bridge) to ASA5505 to PCs.The PCs get an IP address, default gateway, DNS server IPs from ASA5505.Win 7 and XP Pro PCs get IPs, but message warning "No Internet Ac...
I got two asa 5505 - with security plusASA8.43 - ASDM 6.47I have three vlans that need to communicate over the vlan. SiteA Site B1. Inside vlan11 192.168.11.1 to 192.168.10.1 -...
Hello everyone,I've just constructed a very small, very specific policy-map for the first time on our ASA 5510 and I wanted to run it by you all to tell me what I am doing wrong (I am sure I've messed something up) and how I can resolve it.The use ca...
Hello All,just wondering if the prevailing philosophy on firewall management is to 1) allow everything outbound and restrict inbound or 2) restrict both inbound and outbound?We have a situation where we are getting hit with ZeroAcc...
Hi Allis it possible to create a ACL to permit from any to a particular ip address? i.e I have a ASA with three interfaces (inside, outside and DMZ) and I want to create a ACL to permit from any to inside host (this is probably a bad example but anyw...
Hello,I have a question concerning twice NAT.Lets assume that we have the following construction:nat (Inside,Outside) source dynamic Real.Source Translated.Source destination static Real.Destination object network Translated.DestinationMy question is...
I have a Cisco 5505 and have an access point plugged into the POE port 7.I have 2 SSID'S on the access point vlan 1 - production on the 192.168.70.0 /24vlan 10 - guest 172.16.0.0 /24 I do not have a seperate DHCP sever so the ASA wil...
Hi community,Can you share your idea can we prevent VOIP traffic like skype, kakaotalk, wechat, line...? If we can, how to do it, in general?. Because as far as I know these applications are peer-2-peer and use dynamic ports and update version very q...
Hi,We'd like to implement ASA5585 with SSP-60.I knew that the inspection will stop while the signature is updating.because sensor app will be stopped.I guess there are only one signature database on IPS which is managed by IPS device.It means every v...
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:
