Network Security

Hey everyone,Can anyone suggest a proper procedure for allowing external access through the ASA using FQDN?  We are in the process of moving an internally hosted system to the cloud (external hosting) and the option of filtering via IP address is not...

I hope I'm in the correct area.I'm trying to deny access to 3 wireless devices to the cisco 800 series wireless routerThe MAC address are:MAC Address    IP address      Device        Name            Parent         State0014.6caf.410a 192.168.2.26    ...

Despite the fact that I have the following setting:crypto isakmp nat-traversal 10All tunnels are bi-directional.  Our l2l tunnels keep dropping due to inactivity.  On one client, the tunnel drops and doesn't come back up unless you remove the remote ...

Hi,In my case, I have Cisco ASA 5585-X software asa825-smp-k8.bin and I want to go to software asa847-smp-k8.bin.I did like in the link below but I've had many problems.https://supportforums.cisco.com/docs/DOC-12690Example; before upgrade access rule...

I have a /29 network provided by my ISP and I also have an internal /24 network. Outbound internet works OK. I would like to be able to receive inbound traffic (HTTPS) on X.X.X.211 on my main Outside interface (which has an IP address of X.X.X.210). ...

Hello,I have a site to site VPN configured between 2 ASAs on 9.1.3.  Everything is working apart from 1.  We have a management server that we use to SSH and poll devices, this server can't ping the inside of the ASA over the VPN, but can others I hav...

good morning folksI have recently add a ASA 5525-x as a edge on my network, everything works fine. but when I try to setup a IPsec remote vpn  things gets complicated.here is my topology.I have the ASA on top following with a L3 3750 cisco doing the ...

Hi Everyone,Working with Home lab setup and  ping from ASA works on and off.ASA is connected to Router.ASA1# ping 4.2.2.2Type escape sequence to abort.Sending 5, 100-byte ICMP Echos to 4.2.2.2, timeout is 2 seconds:!!!!!Success rate is 100 percent (5...

To manage the ASA in transparant mode (BVI), I have enabled http server, then http BVI1 inside but this did not work. Then I had to add http BVI1 outside.Am I doing it right?

Dear All,   I am having ASA 5520 in Active Standby failover configuration . I want to know if I can upgrade it from 8.4.6 to 9.1.2 using the zero downtime upgrade process mentioned on cisco site . Below is the process : Upgrade an Active/Standby Fai...

I have a /29 network provided by my ISP and I also have an internal /24 network. Outbound internet works OK. I would like to be able to receive inbound traffic (HTTPS) on X.X.X.211 on my main Outside interface (which has an IP address of X.X.X.210). ...

Hi,I'm trying to configure the 5505 to support multicasting using dense mode. According to all documentation I've found it seems that I should use the 'ip pim dense-mode' command to enable DM. However, this command doesn't seem to exist on the router...