Network Security

I understand the fix to this problem with the "same-security-traffic permit intra-interface" command but I'm curious if anyone knows the reason behind by RPC on tcp/135 would need to consult the ASA for a host on the same subnet? The ASA is the gatew...

HI ALL Does Cisco ASA 5510 support dual WAN (Dual ISP). Active / Active or Active / Standby? Hugo

Hey Guys,Please check my below configuration commands on asa 8.3>Question 1 : i want to send inside/dmz1/dmz3 internet traffic using firewall interface by PAT , please confirmif  the following commands are correct?I. nat (any,outside) source dynamic ...

One of the logs I see daily is something that looks like this. "Deny inbound UDP from 115.230.124.3/53 to 12.52.478.5/2713 due to DNS Response.  Googling that log tells you that it is an ASA prevention method that shuts down that flow as soon as one ...

I have routers with the c7200-ik9s-mz.124-25c.bin image. I would like to expose firewall rules via an OID, but it didn't seem like there were any pre-installed MIBs which exposed that information. Would it be possible to import a new MIB (IP-ACCESS-L...

Hi,Does anybody have a working configuration from an ASA running release 8.4.7 or 9.1.5 where the From header URI is correctly NAT'd calling from inside to outside?We were originally running 8.4.6 and none of outgoing header URIs were NAT'd. After up...

Hello,I'm thinking of purchasing a new ASA 5512-x, part number ASA5512-SSD120-K9 and just using it as a plain firewall (as if it was part number ASA5512-K9) and purchase the CX license(s) at a later date when funds are available. Is there any reason ...

Hi guys.When configuring Inspect HTTP there is an option to use Default HTTP Inspection Map.Its used here as an example on the documentation;From the Select HTTP Inspect Map window, check the radio button next to Use the Default HTTP inspection map. ...

Dear Colleagues,   Please help me to solve NAT translation issue. I have ASA v.8.4(5) image. I need to implement static port forwarding translation (to forward packets from Internet to DMZ server when connecting on custom port TCP/17887) Server in DM...

I'm trying to get some clarity around what commands would be needed to allow an ipsec vpn client sitting behind a Cisco IOS zone-based firewall to make ipsec connections through to a vpn gateway out on the internet. This is the sort of thing that is ...

I'm trying to understand the relationship between failover groups and contexts, however it appears that the configuration is split in an way that I am having trouble understanding. The interfaces that you actually monitor are configured PER CONTEXT e...

Hello,  We have two ASA firewalls located in different locations.Firewalls are in Active/Standby modes.Failover links of firewalls are connected to two different switches.These switches are connected to each other with two dark fibers aggregated to E...

Hello, guys. Recently we have recieved Cisco 2921 with SRE-170-k9 module.I'm already install Cisco Prime NAM software on it.I get access to web GUI. And on authentication page of WEB GUI a get a message, that "Evaluation license expires in 59 days."O...

Dear All, I have one L3 switch and 5 VLANs configured in it. And i want to connect one 5520 ASA to pass all the vlan traffice to outside.Second, i have five adsl connection and all are configured with bridge mode, connected to the ASA5520. Now i want...