Network Security

One of the logs I see daily is something that looks like this. "Deny inbound UDP from 115.230.124.3/53 to 12.52.478.5/2713 due to DNS Response.  Googling that log tells you that it is an ASA prevention method that shuts down that flow as soon as one ...

I have routers with the c7200-ik9s-mz.124-25c.bin image. I would like to expose firewall rules via an OID, but it didn't seem like there were any pre-installed MIBs which exposed that information. Would it be possible to import a new MIB (IP-ACCESS-L...

Hi,Does anybody have a working configuration from an ASA running release 8.4.7 or 9.1.5 where the From header URI is correctly NAT'd calling from inside to outside?We were originally running 8.4.6 and none of outgoing header URIs were NAT'd. After up...

Hello,I'm thinking of purchasing a new ASA 5512-x, part number ASA5512-SSD120-K9 and just using it as a plain firewall (as if it was part number ASA5512-K9) and purchase the CX license(s) at a later date when funds are available. Is there any reason ...

Hi guys.When configuring Inspect HTTP there is an option to use Default HTTP Inspection Map.Its used here as an example on the documentation;From the Select HTTP Inspect Map window, check the radio button next to Use the Default HTTP inspection map. ...

Dear Colleagues,   Please help me to solve NAT translation issue. I have ASA v.8.4(5) image. I need to implement static port forwarding translation (to forward packets from Internet to DMZ server when connecting on custom port TCP/17887) Server in DM...

I'm trying to get some clarity around what commands would be needed to allow an ipsec vpn client sitting behind a Cisco IOS zone-based firewall to make ipsec connections through to a vpn gateway out on the internet. This is the sort of thing that is ...

I'm trying to understand the relationship between failover groups and contexts, however it appears that the configuration is split in an way that I am having trouble understanding. The interfaces that you actually monitor are configured PER CONTEXT e...

Hello,  We have two ASA firewalls located in different locations.Firewalls are in Active/Standby modes.Failover links of firewalls are connected to two different switches.These switches are connected to each other with two dark fibers aggregated to E...

Hello, guys. Recently we have recieved Cisco 2921 with SRE-170-k9 module.I'm already install Cisco Prime NAM software on it.I get access to web GUI. And on authentication page of WEB GUI a get a message, that "Evaluation license expires in 59 days."O...

Dear All, I have one L3 switch and 5 VLANs configured in it. And i want to connect one 5520 ASA to pass all the vlan traffice to outside.Second, i have five adsl connection and all are configured with bridge mode, connected to the ASA5520. Now i want...

Hi Guys,We are a new service provider for one of our customers and as a result we need to change the external IP addresses for a ASA5505 pair which are configured for Active/Standby HA.I was wondering what the best way to approach this would be. I wa...

Our office has a number of remote employees that use ASA 5505 boxes to access resources and connect their IP phones to our office.  These boxes all connect through a pair of redundant ASA 5510 firewalls.  When we configure these 5505 boxes, we used t...