Network Security

Hey guys needs some help with anyconnect config for iphone.  I am able to reach the ASA - i get a certificate warning (BMS certificate - although i generated a self signed cert) Then it just disconnects.  Tried connceting from anyconnect on a laptop ...

           Can be configured as an active / active failover one ASA5520 with CSC10 module and an ASA5510 handle with the same module bot configured with full antix features, both ASAs are relatively new (1Y),  but as far as I understand it must be ex...

I have been asked to manage a set of ASA that I reach "via Internet" through their public IP.I am behind a dynamic NAT, so the ASAs does not see me directly.How can I transfer files from my PC to the ASAs for updates?TFTP does not work, because the A...

Hi there, I have an ASA and have VPN configured.  I can connect the VPN and i get an IP from the VPN pool.I know it's being blocked by an ACL somewhere but having problems finding out where.  Anyone able to help?  Ive posted code below:hostname 5505d...

HI Guys I have read many articles but I need a details explanation on what is the difference between drop and deny.Your answers are really appreciated.  Thanks!

Hi,IS it ASA cisco 5510 desnt support VPN sha-2 ?Can i have the document

I've got a PIX firewall running 6.3(1) and I can't get any traffic to go from Outside to Inside and I can only get icmp traffic to go from Inside to Outside.I've tried to open it up completely so all traffic will flow (will the though to locking it d...

I have a site to site VPN configured. It was working fine until today. Packet tracer says ALLOW all the way through flow creation. However, I cannot ping the devices (where I COULD yesterday). I'm at a loss. To me this indicates a change elsewhere. A...

I have a customer with 2 running 5520's version 8.2(and configs several thousands of lines long)(we're not in a position to upgrade these)The customer has bought 2 new 5525-X with version 8.6(and this can't be downgraded to 8.2)How do I get the 8.2 c...

Hi all,Can anyone explain what is more secure when addressing the outside interface of a firewall in a network diagram?1st option:                             ISP router:                                interface 1 (connected to the internet).        ...

I'm currently using an FWSM and we are migrating to the ASA with 9.1 code. The nat is WAY different and I have some questions:1)  To do a PAT to the outside, is it just object network TEST123 subnet x.x.x.0 255.255.255.0nat (inside,outside) dynamic <...

HiI have two cisco ASA routers & wish to connect them together so that traffic between is permitted with out going outside interface.Two asa are located at in ONE office and two have separate internet connection (ISP) configured. So here is what I di...